A quick note – another patch to the WordPress 2.8 line has been added – 2.8.4

Good news – the security issue is in the class of ‘annoying’ rather than serious; the possibility is there to reset the admin password (actually, the first password in the database, which is generally the admin one). However, since it gets emailed to you, it’s not a security issue per se.

Nonetheless, if you want to go for it, upgrading to 2.8.4 is only as far away as your Admin Dashboard – or you can visit WordPress.org directly.