Older versions of Wordpress are vulnerable to a subtle attack that hides itself while adding spam. Is this a turning point for the free product?
Wordpress blogs, one of the most prevalent among custom install blogs (and used by organisations including Downing Street and the Daily Telegraph) are vulnerable - and being hit - by a worm that affects any old (ie before 2.8.4) version.
Details are on Wordpress's site.
