Most of the time when a blog is hacked, the first thing that comes to my mind is that the blogger might have been using a Wordpress theme that contained malicious codes.


If the script was gotten from the original/premium vendor, then we can start pointing accusing fingers to the host. The point is this; most beginners who choose Wordpress as their preferred CMS platform have little or no knowledge about authenticity of a theme and what risk his blog is subjected to if he has no knowledge about what kind of codes has been encrypted or hidden in his theme.
http://www.thatnaijablog.com/2013/05/how-to-scan-your-wordpress-theme-for.html