Recently a security vulnerability was found in TimThumb Script. This security vulnerability allowed anyone to upload any php file into the Timthumb cache directory and execute it to compromise the site.
All themes are fixed now.
If you are already using a theme, you can fix this yourself, check below: