In reply to Joost de Valk.

As I said above: if you were on 1.5+ you were vulnerable. If you weren't, you were not auto updated. So I'm sorry but that's just not true.

You might not like auto updates, disable them if you must, as a plugin author, it helps me sleep better.