I’ve just upgraded WordPress in response to this security alert. I should have done it ages ago.
The alert says
Update your WordPress blog before you continue reading this post. That’s how critical this issue is.
so it seemed like a good idea to bring the site down until I had time to deal with it.