I have just come across the following (published hours ago): http://www.linuxtoday.com/news_story.php3?ltsn=2006-06-12-007-26-SC-SW Severity: High Title: WordPress: Arbitrary command execution Date: June 09, 2006 Bugs: #134397 ID: 200606-08 Is this something that was already addressed? Is it a known issue? Best wishes, Roy