The hosting company assures us that it is not possible for other users to exploit php and web server privileges to modify the site files, so, taking that with a grain of salt -I'm looking at other possible vulnerabilities. So far all I can think of is:
- A vulnerability in a plug in
- A vulnerability in the php used in some templates
So far I'm not finding any issues in trying to investigate in the plugins, but not a whole lot of information either.
What specific steps can I take to locate the vulnerabilities and prevent another attack?