In reply to mark k..

Is there any one in addition to pippin and rarst that produces code that you can blindly trust for not doing stupid things?
Thank you for the compliment but this is just silly and blatantly wrong. Every single developer--PERIOD--introduces security vulnerabilities at some point. The only developer that's never had one is the developer that has never released any code. Period, end of story.

I was responsible for introducing one of the most severe vulnerabilities I'm aware of a few years ago. It was so bad, in fact, it allowed anyone to log into any site running one of my plugins as a full administrator by simply clicking a button--a button that was shown to all users on the frontend of the site.

Let's stay off of the high horses and be appreciative that the WP Ninjas acted immediately to resolve the issue once it was revealed to them and that they immediately worked to get every single site patched in a matter of minutes after releasing the fix.