WordPress version 2.0.1 suffers from cross site scripting, path disclosure, and directory listing flaws.