WordPress users take note: Matt Mullenweg, WordPress co-founder, calls this update “critical.”
That being said, we join his sentiment and urge you to update as soon as possible but, as always, make sure you back-up your website before hitting that update button. Please feel free to contact us for assistance in completing back-ups and/or completing the update.
3.0.4 Important Security Update
Posted December 29, 2010 by Matt MullenwegVersion 3.0.4 of WordPress, available immediately through the update page in your dashboard or for download here, is a very important update to apply to your sites as soon as possible because it fixes a core security bug in our HTML sanitation library, called KSES. I would rate this release as “critical.”
I realize an update during the holidays is no fun, but this one is worth putting down the eggnog for. In the spirit of the holidays, consider helping your friends as well.
-wordpress.org