Lol. I was just contracted to clean a multi site (192 subblogs total) hit with the timthumb exploit not more than 5 days ago... Problem was an out of date script in the nivio slider plugin (outdated version)... I was astounded that people don't update regularly.. or backup for that matter..

Funny thing is, that after the site was infected, it ran probes on a long list of dreamhost accounts for the same timthumb exploit...