Wordpress has a bug! An exploit has been found and if you run any version of WP, make sure you unckeck “Anyone can register” in your Options menu. Also delete any guest accounts already created on your blog. For more info, check out Dr Dave.