[...] A new Wordpress security vulnerability has been discovered, in 2.9 and 2.9.1. It has to do with the newly (and badly) implemented “trash can” feature. (Instead of just deleting posts when told to, Wordpress now routes them through a convoluted trash system.) You can read about the new 2.9.2 version over at the Wordpress Tavern blog. …