If you're currently running the 2.1.1 version of Wordpress (and if you aren't, why not?). Then you need to read and act upon this advisory immediately. Hat tip to Craig for pointing it out to me.