Just so we're clear, the bug only affects bitcoin-qt and not any other 3rd party wallet like multibit right?
I'm going to transfer all my bitcoin to an online account just in case

Do you use SSL for remote RPC calls to your bitcoind daemon? No. Then it doesn't affect you even if you use Bitcoin-Core (the client formerly known as Bitcoin-QT). Forgot about the new payment protocol system. Great timing on that one.

Switching to an online account would be foolish. Shutdown your client if you are worried. Don't statup it up again until you have upgraded.