Yes. It was an up-to-date install of Wordpress, about two months ago. Luckily, the domain was being scanned for vulnerabilities by Duke University OIT, and they

Yes. It was an up-to-date install of Wordpress, about two months ago. Luckily, the domain was being scanned for vulnerabilities by Duke University OIT, and they let me know about it; it was non-obvious that the hack was there. There were certain URLs that had lists of keywords, mostly pharma scams. I don't use Wordpress any more.