Bad news for just about every WordPress blogger out there. It has been found that the latest version 3.2.1 of WordPress is vulnerable to XSS injection attack which allows users to inject malicious JavaScript as a result of failure in sanitizing the comments field. Without discussing much about what this vulnerability could do to your blog I will jump to how it works and the solution.

After putting in all of the time, and perhaps money, into your Wordpress website or blog, its now time to secure and protect it from outside enemies and general bad guys: hackers, spammers and all round tossers.

Without a doubt, for a self-hosted blog, WordPress is the best blog CMS that you can get. Though it comes packed with security features, being a popular and open source software, it also means that hackers have full access to the code which they can scrutinize to find any exploits they can use to hack into any WordPress-enabled site.