Update Your Wordpress installations!!
Lizamoon SQL injection attacks
And here...
New Mass SQL Injection Attack Infects Thousands of Pages
Quote from first article
| Websense says it is not aware of a vulnerability in Microsoft SQL Server 2003 and 2005. The most likely vulnerabilities, researchers say, are in the web systems used by these sites, such as outdated CMS and blog systems. |