If they logged into your account before and checked the box to always stay logged in, a password change will not stop them as long as they don't hit the logout button. Depending on what powers WPM gave to mods, they may be able to view moderator and administrative logs. That would show if a moderator edited your profile. The moderator log can be pruned, but I believe an entry has to be in it for 24 hours before it is able to be deleted from the log if memory serves correctly. That would give other mods and WPM time to see who did it. You might also want to check your posts. If you find any posts that you didn't make be sure to tell the mods which ones. Hope this information will help you, the mods, and WPM.