this is the first I've heard of wordpress sites being compromised. There have always been issues with vulnerabilities in older versions; what are the characteristics of this latest hack? I dealt with a site that was a pharma-hack victim, and after trying to manually remove it I ended up having to resort to wiping the site clean.