http://trac.wordpress.org/ticket/5367
This attack requires read access to the database. So this "security" bug is quite a non-event for me. Upstream are dealing with this, though I'll probably mark this bug as minor. G'nite, -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]