You could use something like WPScan against their blog and then make educated guesses which one was the culprit... https://github.com/wpscanteam/wpscan https:/

You could use something like WPScan against their blog and then make educated guesses which one was the culprit... https://github.com/wpscanteam/wpscan https://github.com/wpscanteam/wpscan