I administer a website that is implemented with Wordpress. The landing page has an audio player and slideshow implemented with respective shortcodes. A little while back the site was hacked by a search engine poisoner, though I believe I have recovered from that by removing some malicious code from the default theme footer.php file.
I also upgraded WP to 3.5.
At some stage (i'm not sure if it is from the hack or the upgrade), the audio and slideshow stopped working, and the web page instead emits the shortcodes to the browser in their place (see here - you can see the offending fragments in the masthead).
Here is the relevant fragment from header.php
<div id="mainimage">
<?php echo do_shortcode('[slideshow id=1]');?>
</div>
I'm not sure where the audio shortcode lives. The page uses the default theme.