Hi Steffan,

It could certainly be a hole in the web host, but it’s more likely a hole in one of the WordPress plugins you’re using.