Well, the posted log, could be a complete fabrication. It certainly doesn't contain anything useful and may in fact be deliberately misleading.

I'm hoping that Thomas and the rest of the crew do perform an intensive and public analysis of the exploit. It wouldn't surprise me if the break was in Wordpress or one of the other application level programs.