Check your plugins cause if there is a backdoor in one of them which you use on all your sites this could be one way or if you have week passwords as teencat said above.
Keep your wordpress up to date
http://hackrz.wordpress.com/ have a read on that it does give you some info on some aspects of hacking