Появи се версия 2.8.5, която, според мен, е задължителна, за да не се случи DoS 
Ето и част от по-важните поправки:
- A fix for the Trackback Denial-of-Service attack that is currently being seen.
- Removal of areas within the code where php code in variables was evaluated.
- Switched the file upload functionality to be whitelisted for all users including Admins.
- Retiring of the two importers of Tag data from old plugins.
Go get @ http://wordpress.org/
http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/
