wp-forum

There is yet another exploit found, but that is for users using the WP-forum plugin, it is advised by wordpress itself that you stop using that script until the author fixes the exploit.