The importance of upgrading your wordpress

If you have been living under a rock recently you may not know about the recent attacks on older wordpress installations.

A stitch in time saves nine. I couldn’t sew my way out of a bag, but it’s true advice for bloggers as well — a little bit of work on an upgrade now saves a lot of work fixing something later.

Right now there is a worm making its way around old, unpatched versions of WordPress. This particular worm, like many before it, is clever: it registers a user, uses a security bug (fixed earlier in the year) to allow evaluated code to be executed through the permalink structure, makes itself an admin, then uses JavaScript to hide itself when you look at users page, attempts to clean up after itself, then goes quiet so you never notice while it inserts hidden spam and malware into your old posts.

VIA:  http://wordpress.org/development/2009/09/keep-wordpress-secure/

If you haven’t upgraded to Wordpress 2.8.4 do it NOW. it could save you a lot of problems.