Wordpress 2.2.3 fixes two security vulnerabilities http://www.buayacorp.com/files/wordpress/wordpress-sql-injection-advisory.html http://trac.wordpress.org/ticket/4720 Reproducible: Always
2.2.3 is in the tree already and will stay ~arch. See bug 168529. *** This bug has been marked as a duplicate of bug 192347 ***