> Has "zero" web dev experience; everything is built on Wordpress and plugins.

So what that sounds like to me is this website is just a delivery vector for whatever cookie cutter malware is floating around the ad networks who load up the sidebar.