One of my WP sites got hacked by this viagra hack a while ago.
The database and the akismet plugins were modified and I was able to fix it, but nowhere I was able to find how I got hacked in the first place.
This article explains very well how to fix it, but not how are these sites getting hacked. Anyone? Anyone?