I found the problem. A hacker placed a backdoor (wp-admin/29) and forced to rewrite the htaccess with it! Thank you for the hint @WebElaine
Related Posts:
- WordPress site hacked. Has .htaccess been hacked?
- sitemap contains weird links and does not contain my pages [closed]
- Should I prevent access to .htaccess and wp-config.php files?
- File and directory permissions
- htaccess https redirect from www to non-www
- .htaccess and 500 error, extra character added
- Place static HTML files in path below WordPress page
- htaccess rewrite for author query string when WP is in subfolder
- Why “Settings->Permalinks” creates .htaccess file on nginx server?
- .htaccess for wordpress inside another wordpress install
- Rewrite /?rest_route=/ link to /wp-json/ without changing default permalink structure in apache
- Globally force SSL on all pages
- Isolating WordPress to a subfolder
- Correct htaccess to display page while also passing in GET parameters
- What is the role of .htaccess file in WordPress?
- How have I misconfigured basic auth for my wordpress site?
- Remove File Extension for Page Outside of WordPress
- WordPress trims off the forward slash when import
- WordPress best solution shared theme for consumers and businesses (two url’s one instaltion)
- Redirect main domain to subdirectory
- different child theme for subdomain
- How do I edit the htaccess file to optimize my website?
- Block only external access to wp-cron.php on OpenLiteSpeed
- Removing code added to htaccess with insert_with_markers
- Site searches by Python for non-existent assets
- WordPress On subfolder
- WordPress 404 on Subdomain
- Can’t Access Subdirectory
- Override htacces rule only for specific directory
- How To Allow Only Specific User Agent To Access a URL?
- How to ignore folder in site root while accessing a URL
- How can I enable keep alive (Not accessing to Apache)
- HTTP sitewide, except for: wp-admin, and 2 custom directories
- WordPress installed in root, need second in subdirectory with different domain
- htaccess has broken my site
- HTTP Error 406 always on site?
- Point all URLs to homepage but maintain URL
- htaccess working on local server but not on live server
- External content won’t load in iframe in Safari
- How to write .htaccess so that https is on for subpages only but not the home page
- Only Allow Front End Access
- Custom rewrite rule, url returning 404
- mod_rewrite doesn’t work as I want even with JSON API Plugin disabled
- Need help rebuilding lost htaccess file
- I have a page using a pretty url and a mod_rewrite rule matching it. I expected it to give an error but it’s working. Why?
- How do I setup htaccess for 301 redirects, post Joomla to WordPress migration? [closed]
- How to rename index.php to home.php
- Strange behaviour of is_user_logged_in() and get_current_user_id()
- Hide a subdirectory on my website hosting
- Can’t access WP site over WiFi network
- Creating a copy of a website in a subdirectory, wp-admin redirect problem
- disable WordPress 404 for one specific page/folder to receive actual php errors
- Troll the hackers by redirecting them
- .htpasswd asking for authentication on home page
- WordPress login fail after .htaccess domain redirect
- Redirect to new domain with .htaccess [closed]
- I am new in word pres my font awesome is not allow
- Access sub-domain when root public_html is protected with .htaccess password
- Redirect https://www.subdomain.domain.com is not redirecting to subdomain.website.com [closed]
- htaccess redirect throws an error: PHP Catchable fatal error: Object of class WP_Error could not be converted to string
- “Oops.” error on an html file directly uploaded to a subdirectory of my WordPress site
- WordPress permalinks confusion
- How do I reset a rewrite?
- VServer/Rootserver/Shared Hosting: Multiple WordPress installations each having their unique domain?
- Sub domain URL slash / missing after domain and before Post & page slug
- Problem with WordPress permalinks
- Basic Auth .htaccess on wp-login, but allow logout from woocommerce
- Why my WordPress Site Asking for HTTP Authentication?
- I need to make one folder private
- htaccess redirects invalid request to home page not 404
- Force HTTPS for mapped domain pointing to wordpress domain
- WordPress How to rewrite URL for custom pages
- How can I restrict access, by IP, to the `wp-admin` folder/Dashboard?
- How to properly give WordPress its own directory
- WordPress permalinks is wrong. It wants me to change my htaccess file. But then site crashes
- How to move wordpress website from hosting account to localhost
- Question with .htaccess and wp-login.php prevention
- After changing permalink, getting 404 for one particular category
- WordPress RSS feed to external XML
- Does htaccess password keep search engines out?
- htaccess old php pages to new wordpress ones
- htaccess mod_rewrite not working
- different CNAME to corresponding subfolders
- block seacrh engines for all pages EXCEPT homepage
- Giving WordPress it’s own directory and using .htaccess Directory Index
- Allowing access to certain WordPress created pages or posts with htaccess / htpasswd
- Restrict download files from not generated Urls
- How to change wordpress news root url
- Problem with All in one WP Migration – only works the home page
- My WP site and password was hacked, what to do? [closed]
- htaccess – Server Subdirectory With Different Name Than URL Subdirectory
- WordPress sections in htaccess kills FrontPage permissions
- How can I stop WordPress from catching URL’s for static pages that I save on my server
- Enable webp support Nginx+Apache reverse proxy with moss.sh [closed]
- How To Add CSP frame ancestors in WordPress Website? [closed]
- The connection to “domain” is not secure
- How do I modify each instance of setcookie?
- How to I serve the static HTML file at the root directory in a wordpress site?
- Why is this line of code Wrong in every WordPress .Htaccess security article?
- What’s the point of the default .htaccess?