if you use #wordpress with a publicly available theme that uses timthumb.php there are now bots crawling to find (and exploit) it