WordPress has released version 2.8.2 to address a cross-site-scripting vulnerability.US-CERT encourages users and administrators to review the WordPress Blog entry on WordPress 2.8.2 and apply the upgrade to help mitigate the risks.
Read more: US-CERT Current Activity