Automattic has released Wordpress 2.8.5 an open source (GPL) blog engine based on PHP and MySQL. This release fixes yet more security holes, and attempts to harden WordPress somewhat against as yet undiscovered vulnerabilites. All users should upgrade.