10,000 hacked WordPress sites have caused thousands of PC infections