Index.php autofaucet iframe

Hello, anyone knows any vulnerabilities that allowed this to happen? So this iframe was inserted to the index.php of my wordpress site.

https://prnt.sc/231epg0

I’ve checked and scanned the site using some plugins like wordfence (premium) and that’s the only thing that appeared.

My friend also experienced something like this weeks ago with each of his sites hosted separately.