BuddyPress.org

just a thought: How about the intruder coming from another end than wordpress? There are so many theoretical ways to enter some data in the database.

Of course that doesn’t mean it’s not a wordpress problem – just to keep an eye on other things too.