WordPress Plugs Admin Password Reset Vulnerability
Power Blog Service clients’ blogs are all now running on WordPress 2.8.4 only a few hours after the security patch was released.
This WordPress release fixes a weird security bug where a hacker can reset but fortunately not steal your blog’s admin password.
Click for more information from WordPress on the WordPress 2.8.4 Security release.
No database upgrades were required for this release.