Re: Other blogs hijacking homepage
Temporarily disable xmlrpc in wp’s backend: Settings > Writing > xmlrpc
Temporarily disable pingbacks and trackbacks Settings > Discussion > Default article settings
Delete the blogs that look like that.
The cracker seems to be using that. Very definately upgrade immediately.