The WordPress blogging software earlier than WordPress 2.8.1 or WordPress MU 2.8.1 has a bug that may allow attackers to bypass security and gain administrative control of the blog. You'll need to upgrade to the versions listed above for the fix. The Security Focus website has more.
