Word Press released a new update version 2.8.5 hoping to address some security issues before version 2.9 is released.You will see a reminder when you log into your Word Press Platform.
Some of the fixes included in the 2.8.5 update include the following.
A fix for the Track-back Denial-of-Service attack that is currently being seen.
Removal of areas within the code where php code in variables was evaluated.
Switched the file upload functionality to be white-listed for all users including Admins.
Retiring of the two importers of Tag data from old plug-ins.
They are recommending all sites using Word Press update as soon as possible to ensure their site is protected. They are also suggesting if you think your site was exploited you take advantage of their Word Press Exploit Scanner.
The scanner will search your files and comment tables for anything that could be suspicious. The scanner will also search your plug-ins for unusual names. The scan can take awhile to run. You might want to run it during a time when your server is not as busy.