TechCrunch: WordPress.com has informed its users that a hacker gained root-access to its servers. While the investigation into the incident is ongoing, site owners that use the WordPress platform have been advised to change any passwords and API keys that could have been in their source code.
WordPress serves 18 million publishers, about 10 percent of all Web sites in existence.