Thank you for the link to Hardening WordPress and other info. The site has been restored from a backup and I’ll pass your info along … and recommend new passwords, etc.
Also … no, the reason is not an outdated version. The current version of WordPress had this happen.