More details have come out about the latest attack, this is a new one that is quite insidious. If you have a recent install you would not be vulnerable (although upgrading to the latest release is still recommended), but any store more than a year old or more may need quick patching. Contact me directly or visit the CFWebstore email list for more details on how to patch your specific version and tips on other things you can do to keep sites secure.