WordPress has released WordPress 3.0.5 to address multiple vulnerabilities. Execution of these vulnerabilities may allow an attacker to conduct cross-site scripting attacks or obtain sensitive information.
US-CERT encourages users and administrators to review the WordPress Codex document for version 3.0.5 and apply any necessary updates to help mitigate the risks.