Disabling reset password function over email of WordPress and Fix bug Unauthorized Reset Password (0day). Use caution and if necessary, after the core fix bug fixes you should delete it.