You could use something like WPScan against their blog and then make educated guesses which one was the culprit...

https://github.com/wpscanteam/wpscan