Wordpress sites have just recently been hit by a massive number of botnets. According to ZdNet http://www.zdnet.com/wordpress-hit-by-massive-botnet-worse-to-come-experts-warn-7000014019/, A massive botnet of tens of thousands of machines is attempting to hack in to weak password protected "admin" accounts of the popular blogging platform Wordpress. Many have succeeded, so you should ensure your wordpress installation is secure. You can do this by following the steps below.

Always update your installation and all plugins.
Remove any unused plugin or extension
Change your directory permissions to 755 and files to 644
Use a secure password for your cPanel and admin area, this should help: http://pctools.com/guides/password/

For wordpress users,
Install the WP Better Security Plugin http://wordpress.org/extend/plugins/better-wp-security/
Disable DROP command for the DB_USER (You can do this from your PhpMyAdmin)
Move the “wp-config.php” one directory level up, and change its permission to 400.
Change the permissions of your .htaccess file to 400
Restrict access to wp-admin only to your network/system IP.

Remain secure,
KCEmenike
http://echo.com.ng