WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable to this problem, but we advise upgrading to 2.8.1 to be safe.
With Release Candidate 1, we think WordPress 2.8 is ready and complete. Download it, test it, and tell us what you think. If you don’t uncover any bad bugs, 2.8 will be released on Wednesday the 10th.
If you’re interested in what has changed since beta 2, consult the changelog.