Unauthorized user added in goog WMT

title says it all, had an old version of wordpress on this site so I am guessing/hoping that might have been the culprit, anyone have this happen before? I changed my wordpress password and Im contacting host now to see if I have been compromised on that side.