In case you missed it in the holiday shuffle, the good folks at WordPress rolled out another important update in late January. Here’s the skinny:
Version 3.0.4 of WordPress, available immediately through the update page in your dashboard or for download here, is a very important update to apply to your sites as soon as possible because it fixes a core security bug in our HTML sanitation library, called KSES. I would rate this release as “critical.”
This issue affects all versions of WordPress prior to 3.0.4, so if you are still on a 2.X release you need to update as well.
Upgrading is usually fairly simple and without headache, but if you need assistance getting up-to-date, feel free to contact us.