One annoying problem with ZdStats (statistics plugin for wordpress) is that it does not have a feature where by you can filter out visits of admin. Yes, there is IP filter, but it would not work for admins with dynamic IPs like me. Also there is a bug where AJAX requests from the admin panel are also counted in visits (2 x page views while writing a post). Not what you want.

Today, there was an attempt to inject SQL into my wordpress and retrieve the admin log in from the IP 87.118.112.44. There was 14 attempts in total, few of them trying to inject SQL and few trackback attempt. Since there was an SQL Injection attempt from the same IP around the same time, I can safely say that all of them ware attempts of hacking.Yes, wordpress may have plugged all the holes in it, which allows remote injection of SQL, but still to be on the safer side, consider the first and basic thing you should do to not become an easy victim.