Bloggers running Wordpress beware: older versions of the popular blogging software are under attack. You need to update your Wordpress to its latest version now.  To be safe, you need to run version 2.8.4. All versions prior to this one are being hacked and the number is growing by the hour.

To find out whether you have been attacked, look for two things:

1.  Check your permalinks to see if there are “eval” and “base64_decode.” in the permlink, e.g., yourdomain.com/category/post-title/%&(%7B$%7Beval(base64_decode($_SERVER%5BHTTP_REFERER%5D))%7D%7D|.+)&%/.

2. You may no be able to log in to your Admin because the attacker has changed the password for the admin account. If you are lucky and can still log in as an Admin, check to see if there are any site users you do not recgnize that is set us as a hidden admin.

If you can no longer log in, check out this possible solution.

This is an urgent matter. Do it now to protect your blog.