Malicious code in 3rd party wordpress themes