After finding a security issue with Apache and the INI file, I’ve released an update that addresses this. BlogCFC now uses blog.ini.cfm. I know - big change? Well along with an Application.cfm under the org folder, it should now be impossible to view the INI file remotely. It still uses the same format, so at most folks will need to do is rename the ini file, copy over the CFC file and the application file, and reinit to double check.
Also - I was convinced (by people smarter than myself) to stop releasing so many updates without changing the version number. I’m now using a minor version. This minor version will always change, period. To see if you are running the very latest, you can compare the result of getVersion from your blog with the download pod on the project page.