WordPress security

• check with AVG / Firefox for alerts
• check for additional users
• exploit scanner plugin (pay attention to changed core files)
• timthumb scanner