A new version of the WordPress software is available, and the update includes fixes for a number of security vulnerabilities. Version 3.3.2 also has some other fixes for cross-site scripting and other flaws. WordPress sites often are used in mass-injection attacks in which attackers compromise those sites and use them as platforms for infecting visitors through drive-by downloads. WordPress is used widely for both personal blogs as well as somewhat larger sites, and it has become a frequent target for attackers in a variety of campaigns.
Source: https://threatpost.com/new-version-wordpress-fixes-slew-security-bugs-042312/76465/