Site defaced and CMS insecure!

Checking here: http://killmalware.com/donpowell.com/
CMS insecurities detected:
WordPress Version
3.3.1
Version does not appear to be latest 4.3.1 - update now.

WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.

google-language-translator latest release (5.0.04)
http://www.studio88design.com/plugins/google-language-translator
gravityforms Warnings: User Enumeration is possible & Directory Indexing Enabled

48 suspicious files detected - Detected suspicious function call.
Details: Detected suspicious PHP call: system

polonus (volunteer website security analyst and website error-hunter)

42% of the trackers on this site could be protecting you from NSA snooping. Tell donpowell.com to fix it.

Identifiers | All Trackers
Insecure Identifiers
Unique IDs about your web browsing habits have been insecurely sent to third parties.

72=znn_jybxzr4jgxle-XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXowubazngq9tay9qxiihnd07hlf2i7f7l2sw translate.google.com

polonus