WordPress force installs Jetpack security update on 5 million sites

The announcement made by Automattic says the bug impacts all versions starting with the Jetpack 2.0 release and going back to November 2012. There is no evidence it has been exploited in the wild.