Sigh. More hacking attempts and seems someone did manage to inject a php eval attack into one of my Wordpress installs.