If you have registration enabled a flaw was found in the XML-RPC implementation such that a specially crafted request would allow a user to edit posts of other users on that blog. In addition to fixing this security flaw, 2.3.3 fixes a few minor bugs. If you are interested only in the security fix, download the fixed version of xmlrpc.php and copy it over your existing xmlrpc.php. Otherwise, you can get the entire release here.

Also, there is a vulnerability in the WP-Forum plugin that is being actively exploited right now. If you are using this plugin, please remove it until an update is available from its author.

Since we are talking security, remember to use strong passwords and change them regularly. While you’re updating WP and your plugins, consider refreshing your passwords.

10. Executable Php Widget- This one allows you to insert php code into a widget to use on your sidebar.

9. Feedburner Feedsmith- This one automagically forwards your wordpress RSS feed to your feedburner feed. Sweeet!

8. iWPhone - Reformats your blog so that it can be properly viewed on a iPhone.

7. Most Commented - This one swipes the most commented posts and put the in a list from greatest to least. This one will draw attention to your most popular posts.

6. Popularity Contest - This one makes a list of your most popular posts from greatest to least. Your even able to create a popular posts page. Again another plugin that will draw attention to your most popular posts.

5. DoFollow- Removes the no follow tag from your comments. Stimulates commenting on your blog.

4. Show Top Commentators - Encourage more feedback and discussion from readers, by rewarding them every time they post a comment! Readers with the most comments are displayed on your Wordpress blog, with their names (linked to their website if they provided one).

3. Related Posts - Returns a list of the related entries based on active/passive keyword matches.

2. Wordpress.com Stats - Tracks views, post/page views, referrers, and clicks. Requires a WordPress.com API key.

1. MaxBlogPress Stripe Ad - A new non-obtrusive way of displaying a single line of advertising message, a special note or other information right at the top of your blog. This is currently my favorite plugin. Why? Because I said so that’s why!

Vote for your favorite plugin!

Note: There is a poll embedded within this post, please visit the site to participate in this post’s poll.