I think you'll find now debian security has finally put 2.0.10 of Wordpress into stable: http://packages.qa.debian.org/w/wordpress.html Keep up to date :)