I don’t believe it – my WordPress site got hacked !
They were posting comments with link backs to their sites, I’ve got anti-spam blah blah blah. Now to post a comment you have to leave an email address but there was no email address in the comment form when I looked at them from the admin screen. Strange.
So I turned commenting off but still I was getting comment spam.
WordPress 3.3.1
No strange plugins.
I’m running my own servers not shared hosting (no other sites touched but none of them are on WordPress).
So I guess it’s back to Drupal. However what is really pissing me off is the fact I’d only just finished theming it.
I work with Drupal quite a lot, it’s a bit over the top for a simple blog but at least it’s secure!!!