Yes, I let my Wordpress installation rot. And it's entirely my fault.
Wordpress makes it so easy to keep it up to date now that there is no
excuse, so I do accept full responsibility! I'm lucky in the fact that
all the hacker
did was rewrite my .htaccess …