WordPress has released WordPress 3.0.2 to address a vulnerability that may allow a malicious Author-level user to gain further access to the site, to fix multiple software bugs, and to provide additional security enhancements.
US-CERT encourages users and administrators to review the WordPress blog entry regarding the release of WordPress 3.0.2 and apply any necessary updates to help mitigate the risks.