My WordPress site was hacked too. Luckily all they did was replace my htaccess file with a hacker message. Easily fixed, but something I want to prevent in the future. All my folders are set to 755 and all my files are set to 644 so I have no idea how he got in. My host says that my blog is set to 777 and I don’t see that anywhere since the permissions are set to 755 & 644. The only Plugins I am using are DoFollow and Optimal Title. I think I am using WordPress version 1.5.2, but I’m not sure. Anyone have any ideas?