If your blog allows users to register and log into your site then there is a security release for WordPress 2.8.6. The update corrects two exploits. One is an XSS exploit and the other is a problem with sanitizing uploaded files names.
Read up on the full WordPress 2.8.6 security release on WordPress.org.
