From the one and only Lance M. Havok (LMH started the Month of Apple Bugs and the Month of Kernel Bugs) comes Pwnpress, a ruby script containing exploits for WordPress 1.5.1.1, 1.5.1.3, 2.0.5, 2.1.3, 2.2 and 2.2.2. WordPress 2.2.3 is the latest stable release.
Even if you're not running WordPress it's worth checking out the Pwnpress source code for the comments alone. For example:
# One of the most sloppy, unreliable and awkward exploits ever released for
# Wordpress. The original exploit from Stefan Esser was mediocre at best.
# No offense meant, it was just a seriously deficient piece of horse shit.
If you're not keeping WordPress updated using Subversion, now is as good a time as any to make the jump.
If you're the curious type, be aware that info-pull.com/code/ is decidedly not work safe.
