My wordpress install got owned *again.* Less than two days after I re-added the ‘Faster Image Insert’ plugin, so I’m pretty sure that was the entrance vector.
Same as before- random javascript, redirection, base64 obfuscated code in my templates and php files, and the reappearing .logs directory.
I’ve had it with this; I’m going to look into hosting my blog on wordpress.com so that I don’t have to spend one night every month or so cleaning the infection out of my site.