My site was cracked… specifically to inflate search results it seems with lots of hidden links… and the logs didn’t go back far enough to find out why…
I’ve changed all the passwords, got rid of any extra plugins/themes, and cleared out all files that has been modified. What else do you do? All the software was fully up to date. I think I will make it a git repo so I can easily see changes (keeping a copy on my local machine as well).
I am quite annoyed at Google. I found out my site was cracked because I searched for my name. Google knew my site may be comprised, and didn’t bother to inform me. I have Google Webmaster tools set up for the domain, no messages or alerts (and they are specifically enabled).
Useful sites for determining if/where your site is suspicious: