A vulnerability in WordPress’s handling of incoming cookie information allows remote attackers to cause the program to execute arbitrary code if the PHP settings of register_globals has been set to On.

To protect your blog, you can choose between these 2 solution:

1. From Tamba2, edit .htaccess file that covered your blog and add the following line:
   php_flag register_globals off
2. From Kamigoroshi, if you’re too lazy to edit the file, just download the fix here, and upload it to your blog directory. It will replace wp-settings.php file.

That’s it, you’re now immune to the remote attack caused by this exploit. It’s easy and take less than 5 minutes, so you should do it a.s.a.p before it’s too late :d