The vulnerability has been fixed and the site is now online again.

It was due to SQL injection, a minor code lapse in 1 file put the whole site at risk (goes to show you need to be careful). All images and information is safe, nothing was lost.