WP 2.8.4 Hacked – and quite strangely

Hi all,

my portal, which is on 2.8.4, has just been hacked less than 30 minutes ago. I have over 20,000 indexed pages, of which the homepage redirected to a get-rick-quick site following the hack, and all other pages returned a 404.

I have immediately submitted a ticket to my hosting company (GoDaddy), however, I notice the site is back up and running now. Overall, the hack lasted about half hour and the site returned to “normal” without me taking any action at all. I highly doubt anyone in GoDaddy did anything to solve it, as it was literally only minutes after I have submitted the ticket that the site went up.

Has anyone seen something like this, and cares to share some thoughts, please? I am particularly worried since this happened on a 2.8.4 version which I understand it’s thought to be secure.
Moreover, can anyone please advise how would I check for current vulnerabilities that allowed it to happen, and prevent this from happening again?

Many thanks,
Otilia