Alright all of you WordPress users out there, listen up - the project has released a new version that you should update to as soon as possible - WordPress 2.0.6. Too lazy to upgrade? You might want to check out the reason for the new release:
We have a pretty important release available for everyone, it includes an important security fix and it's recommended that everyone upgrade. This is the latest release in our stable 2.0 line, which we've committed to maintaining for several more years.
They've also included a new anti-XSS bit of functionality (attribute_escape) and a new filter for comments and such called "query" to escape things nice and neat. This is all to help resolve the security issue that came up.
Check out some of the comments the community is making about this release too:
- A release announcement from the JSLabs blog
- Stefan Esser's post on the PHP Security Blog
- an informative post from Ryan Malesevich's Blog