Cleanup Hacked WordPress Website

If your WordPress website hacked, then this article will help you to cleanup website. see below:

First, use following online tools to detect if website hacked or not:

1. https://sitecheck.sucuri.net/
2. https://hackertarget.com/wordpress-security-scan/
3. https://gf.dev/wordpress-security-scanner
4. https://wpsec.com/
5. https://wpneuron.com/wordpress-vulnerability-scanner/
6. https://quttera.com/
7. https://firstsiteguide.com/wordpress-security-online-scanner/
8. https://www.virustotal.com/gui/home/url
9. https://transparencyreport.google.com/safe-browsing/search

If your WordPress website hacked, Follow below steps to repair or cleanup your WordPress website.

1.) Change passwords for FTP Accounts, Hosting, WordPress user accounts, cPanel, Database etc. ASAP

2) Remove and replace all files in root folder with fresh version of WordPress except “.htaccess file”, “wp-config.php” file and “wp-content” directory. so, it will remove all malicious or hacking code added by hacker in core files.

3) Once above second point completed, check .htaccess file, wp-config.php file for malicious code. Once it complete, you need to check files inside wp-content directory which contains theme, upload, plugin files. hackers are mostly attack on outdated plugins or themes which are not updated since more than 6 months or years.

4) Check all installed plugin on admin. if you see any plugin which didn’t released update since more than 1 or 2 years, try to find alternative plugin and remove that plugin if possible

5) Check active theme files and parent theme files if child theme used. Remove other unnecessary themes.

6) Install security plugin like https://wordpress.org/plugins/wordfence/ (Recommended) and scan whole website for malware and remove malicious code if found on scan results. Configure wordfence plugin for better security.

Once all of above steps completed then check website again with above given online tools to detect malicious code. if website cleaned up, then tighten up security by following Tips To Secure Your WordPress Site From Hacking article to prevent again from hacking.

Hope this help.