If you updated WordPress in the past few days, download the new version and update it again. A hacker was able to add malicious code to the download. The new version is WordPress 2.1.2. For more information see: WordPress 2.1.1 dangerous, Upgrade to 2.1.2.

If you have only upgraded to WordPress 2.1, this does not apply to you. If you upgraded immediately after WordPress 2.1.1 was released, you should be okay. This appears to apply only to downloads within the last three or four days.

This is a highly unusual situation and more information will be forthcoming. Check out the announcement for more details.

March 3rd, 2007 | Web Stuff, WordPress