DavidR
2
Avast doesn’t contact sites as there are literally thousands of site infected per day. So if you have any contact at zooniverse you should give them a heads up.
This is a very handy site, http://sitecheck.sucuri.net/scanner/ just enter the URL and that returns a detailed analysis of what it finds.
There have been a number of wordpress vulnerabilities which has resulted in many sites being hacked, so it is important to ensure they have the latest version of wordpress. See image as this also indicates an out of date wordpress and the site being infected…