abandonedhero

Is this a security hole in WordPress that’s been exploited before? I also have seen this, and I noted that the comment was caught not by Akismet, but ended up in my moderaton queue, but is it possible that the damage as already been done at this point?
Screenshot

I’ve also found that editing your index.php file, as done in Matt’s Asides is the best way to go. I tried MiniPosts and Simple Asides, and had issues with both. I suppose it’s always better to have things more customized the way you want them, rather than relying on a plugin.