How was my WP site hacked [closed]

If you do a Google search, you will find many topics on this.

Here are some links:

First read this: http://codex.wordpress.org/FAQ_My_site_was_hacked

Then take a look at these links:
http://ottopress.com/2009/hacked-wordpress-backdoors/
http://wordpress.org/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/

If you have access to your database, login using PHPMyAdmin and change admin username / password, delete users you don’t know and change password for rest.

Then start the process of backing up data and do a clean install.

Note. If you can’t find out how they got access to your site, doing a clean install and putting back data, will still leave whatever hole open.

Also not that backdoors (links / code) could have been added to your posts, so all content must be checked before you import exported data.

Related Posts:

  1. What’s the effect if this malware if infected your WP?
  2. Malware on site [closed]
  3. How to find the backdoor of the hack
  4. My wordpress site was hacked – is my htaccess file compromised?
  5. My WordPress Blog sends malicious traffic to other sites [closed]
  6. Hacked WordPress website, as notified by Google Search Console, what to do? [closed]
  7. If a WP install is hacked, can it spread to other domains on a server?
  8. Find and Replace text in the entire table using a MySQL query
  9. Is it a good idea to rename the “index.php” in “wp-admin” folder to avoid being hacked?
  10. How to fight this wp-info.php exploit? [closed]
  11. Prevent Hacking of WordPress Site [closed]
  12. Suspicious URLs being loaded after hack and restore
  13. Server hacked: correct contents of wp-uploads directory? [closed]
  14. Site hacked with malware [closed]
  15. Copy wordpress website pages and content
  16. How do I know if my WP Theme is using infamous TimThumb?
  17. Spam pages hack? [closed]
  18. Check for malicious code?
  19. Why would a hacker add this code to each post, and how to do mass cleanup?
  20. Is the current spate of hacks related to the recent security fix?
  21. I have removed the malware from our website however, when I tried again to search the word from Google it is still there [closed]
  22. Have I been hacked? Mysterious code at the top of theme files [closed]
  23. Strange codes in my wordpress site and my website is running too slow [closed]
  24. Spam Content Serving from old cached version of site?
  25. How to solve wordpress redirection (no malware was found)?
  26. Help determining if the following are legitimate files
  27. My blog was hacked? WP posting random posts
  28. Have I been hacked – getting new site setup email for 8 localhost wordpress sites
  29. Site Hacked – WordPress Divi Site – Cannot find where to fix the issue? [closed]
  30. malware in wordpress installer on dreamhost. [closed]
  31. Where I can find a list of WordPress security risks?
  32. looking for indoxploit hack solution [closed]
  33. Why functions.php file automatically empty?
  34. Bruteforce attack from 127.0.0.1?
  35. WordPress installer attack
  36. Why wordpress is hitting another url
  37. Where do hackers usually run their hacking script? [closed]
  38. Malicious Code in Index.php WordPress [closed]
  39. WP Site Hacked, Serp Google Spam [closed]
  40. My site appears to be hacked [closed]
  41. WordPress Redirect Hack
  42. Strings of malicious code to look for after a hack
  43. Hacked/cloaked sitemap [closed]
  44. Not able to change WordPress admin email. Someone added another admin credentials
  45. My WordPress Website Redirect to bigbricks.org and other site
  46. Verifying that I have fully removed a WordPress hack?
  47. If a hacker changed the blog_charset to UTF-7 does that make WordPress vulnerable to further attacks?
  48. Scanning Database for malicious Data
  49. How Attackers write script into my php files?
  50. Is this a hacking script in function.php?
  51. Websites defaced by uploading script using theme editor
  52. How can I find security hole in my wordpress site?
  53. Has anyone experience w/ WordPress (MultiSite) hidden users (possibly hacked)?
  54. Restrict access to xmlrpc.php
  55. How to prevent bot or someone to modify any file automatically?
  56. How do i disable/disallow and tags in TinyMCE?
  57. hSite has no css on mobile [closed]
  58. How to mass delete one line from all posts after site hack
  59. Strange gibberish JavaScript in Editor – site hacked?
  60. Security issues with WP sites
  61. Suspicious Files
  62. Invisible spam post in backend
  63. You appear to have already installed WordPress. To reinstall please clear your old database tables first
  64. sitemap contains weird links and does not contain my pages [closed]
  65. Malware script in database post table only? [closed]
  66. New user is assigned 2 roles: customer and superadmin
  67. Hacked WordPress website /Homepage redirect [closed]
  68. WordPress Footer Missing After Website Hack
  69. What is this code in my theme’s footer.php causing chmod permission warnings? [closed]
  70. What does this code do? (Injected code hacked)
  71. My WordPress website was hacked [closed]
  72. Hack-Proof OR Security in WordPress — is it real?
  73. Some one is trying to hack my website, Need guidance [closed]
  74. Efficient way to check local WordPress php files and Database for malicious code? [duplicate]
  75. Is wp-app.php or wp-apps.php needed for WordPress?
  76. Any known bugs that could cause disappearance of the wp_users table?
  77. Is there any pre-existing plugin to track and block IPs with suspicious activity on my site?
  78. On new server, site got hacked, permissions a bit strange? Please help
  79. Website show Google Ads when we have no Google Ads linked to our website
  80. Multiple attempted logins originating from the server IP itself?
  81. Is there a simple way to set wordpress site files back to out of the box?
  82. Remove hacked code – out of ideas! [closed]
  83. Username was changed to “admin”
  84. Am receiving more than thousand mails in single day from ‘[email protected]’ continuously
  85. How to bulk delete a certain part of all wordpress posts
  86. WordPress Database Re-installed (Hacked)
  87. How to log into WordPress via GET/POST
  88. Verifying that I have fully removed a WordPress hack?
  89. Subpage is redirecting to spam site
  90. Open content directory help!
  91. Hacked site using transient API?
  92. After being hacked Fatal error: Call to undefined function get_header() in 404.php on line 1
  93. Could a user account with a stolen password compromised entire WP site?
  94. how to find the way they hacked my WP site
  95. How to remove content from hacked pages? [closed]
  96. How to stop repeated hack on header.php of custom theme? [closed]
  97. My WordPress site hacked with unwanted popups [closed]
  98. WordPress Hacks/Defacing [closed]
  99. Redirected You too Many Times and Homepage Not Loading
  100. Do not allow the creation of an administrator remotely