Turns out that the theme I was using was hacked. I don’t know the details but Blake (my server admin) described the theme I’d been using for the past several years (PressWork) as “toxic.”
So, at the moment I’m on the default 2015 theme. Eventually I’ll probably look for a new theme but this is the one I’ve got for now.
Live and learn.