Weak configuration vulnerability in WordPress informational

WordPress versions up to and including 4.8.2 use an insecure password hashing algorithm. This means that if an attacker can get access to the hash values, they can easily figure out what the plain text passwords are. It is possible that changing this algorithm might not work with certain uses of WordPress, like if you are moving your WordPress website from a web host that uses a recent version of PHP to a web host that uses PHP 5.2, which is still being used by some websites.