Re: I’ve got a worm.
@andrea_r Ok then that’s not so funny, although reading a few of those posts in the link you provided do seem to suggest that the hacks were in a uploaded free theme.
If it’s a ftp compromise it’s really about time ftp was simply forbidden or retired 
, such an insecure means of accessing a server especially when there are many far more secure protocols around such as sftp
