Someone broke into my hosting account via the admittedly not-so-strong admin password and uploaded some malicious code via plugin installs.
I was notified by Hostgator now, they sent a pretty impressive report (who, when, what)
Clearly my fault. I'd like to think this is due to the weak...