WordPress 2.6.3 [1] is out, it fixes a Snoopy class vulnerability.
A vulnerability [2] in the Snoopy [3] library was announced today. WordPress uses Snoopy to fetch the feeds shown in the Dashboard. Although this seems to be a low risk vulnerability for WordPress users, we wanted to get an update out immediately. 2.6.3 is available for download right now. If you don’t want to download the whole release to get the security fix, you can download the following two files and copy them over your 2.6.2 installation.
Replace these 2 files:
Download full version: