Had a WP install hacked, thanks to some great feedback from @dreamhost, I've got a few tasks left to clean this up