I was once hacked. They found their way in using a Wordpress plugin called WP-Lytebox. Fever, AWStats, all of those redistributables are potential security threats. Many people don't update/upgrade modules that they don't write themselves. Lesson learned?