I am sure many have seen the news of the hack at Linux Mint. The ISOs were changed on 20th Feb with backdoored ISOs.
They gained access via the LinuxMint Wordpress blog installation.
How could they have got access to the other directories on the server using just Wordpress? Could having Wordfence installed have stopped this? http://freedompenguin.com/articles/news/lessons-linux-mint-hack/