If you are not running WordPress 2.8.4, your site is vulnerable!  WordPress 2.8.4 has been released to fix huge a security hole.  This is the vulnerability that was discovered: A specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested...