Plug it in, plug it in

An update to MT is available that “fixes a vulnerability in the mail sending packages for all Movable Type versions which allows malicious users to send email through the application to any number of arbitrary users.” It’s available as a full install package, an update (to 3.15), or as a simple plug-in (which evidently does not change the version number).