WordPress Vulnerability

WordPress versions < 1.5.2 running on servers with register_globals turned on are subject to a PHP data injection exploit.