Yesterday I discovered a XSS exploit in WooThemes. I notified WooThemes and they have fixed it and released a new version of their framework. So if you are using WooThemes I strongly suggest that hit the update button.

Consider yourself warned.