Sounds more like a self replicating malware somewhere, probably in some totally unrelated Wordpress plugin on unrelated sites scattered about