Oh balls, the spammers are back

Looks like spammers are exploiting a WordPress security hole: I’m seeing links disappear, with hidden links appearing in the page code. I’m on it, but expect weirdness for a bit.