Look at all of the ‘related’ links to the right of your question for help with a hacked site.
I would reinstall everything (WP, themes, plugins), check htaccess files (in all folders, not just the site root folder), change all site access passwords (ftp, host, email), check your local computer, look for unexpected files (in all folders, sort by date to help find anomalies).
If this is above your skillset, professional help may be required.
Added
For my own reference, I created a post about the things I do to fix a hacked site: http://securitydawg.com/recovering-from-a-hacked-wordpress-site/ .But the googles (and a search here) will give you much guidance on how to recover.
Related Posts:
- What’s the effect if this malware if infected your WP?
- Malware on site [closed]
- How to find the backdoor of the hack
- My wordpress site was hacked – is my htaccess file compromised?
- My WordPress Blog sends malicious traffic to other sites [closed]
- Hacked website redirect, only on desktop, help with restoring it [closed]
- Hacked WordPress website, as notified by Google Search Console, what to do? [closed]
- How was my WP site hacked [closed]
- If a WP install is hacked, can it spread to other domains on a server?
- Find and Replace text in the entire table using a MySQL query
- What is this code in my theme’s footer.php causing chmod permission warnings? [closed]
- Is it a good idea to rename the “index.php” in “wp-admin” folder to avoid being hacked?
- How to fight this wp-info.php exploit? [closed]
- Prevent Hacking of WordPress Site [closed]
- Suspicious URLs being loaded after hack and restore
- Server hacked: correct contents of wp-uploads directory? [closed]
- Site hacked with malware [closed]
- Copy wordpress website pages and content
- How do I know if my WP Theme is using infamous TimThumb?
- Spam pages hack? [closed]
- Check for malicious code?
- Why would a hacker add this code to each post, and how to do mass cleanup?
- Is the current spate of hacks related to the recent security fix?
- I have removed the malware from our website however, when I tried again to search the word from Google it is still there [closed]
- Have I been hacked? Mysterious code at the top of theme files [closed]
- Strange codes in my wordpress site and my website is running too slow [closed]
- Spam Content Serving from old cached version of site?
- How to solve wordpress redirection (no malware was found)?
- how can i find malware code and remove from wordpress site to stop it redirecting to hackers click view pages
- Help determining if the following are legitimate files
- My blog was hacked? WP posting random posts
- Have I been hacked – getting new site setup email for 8 localhost wordpress sites
- Site Hacked – WordPress Divi Site – Cannot find where to fix the issue? [closed]
- malware in wordpress installer on dreamhost. [closed]
- Where I can find a list of WordPress security risks?
- looking for indoxploit hack solution [closed]
- Why functions.php file automatically empty?
- Bruteforce attack from 127.0.0.1?
- WordPress installer attack
- Why wordpress is hitting another url
- Where do hackers usually run their hacking script? [closed]
- Malicious Code in Index.php WordPress [closed]
- WP Site Hacked, Serp Google Spam [closed]
- Redirected You too Many Times and Homepage Not Loading
- WordPress Redirect Hack
- Strings of malicious code to look for after a hack
- Hacked/cloaked sitemap [closed]
- Not able to change WordPress admin email. Someone added another admin credentials
- My WordPress Website Redirect to bigbricks.org and other site
- wordpress sites get hacked
- How to fix hacked website
- Redirect from an HTML page
- Redirect from an HTML page
- How do I make a redirect in PHP?
- How do I make a redirect in PHP?
- How do I redirect to another webpage?
- How do I redirect to another webpage?
- In the shell, what does ” 2>&1 ” mean?
- How to redirect all HTTP requests to HTTPS
- Is there a way to follow redirects with command line cURL?
- In the shell, what does ” 2>&1 ” mean?
- Redirecting to URL in Flask
- PHP page redirect
- The page was not displayed because the request entity is too large on IIS
- The page was not displayed because the request entity is too large on IIS
- PHP header(Location: …): Force URL change in address bar
- Server.Transfer Vs. Response.Redirect
- What does HTTP/1.1 302 mean exactly?
- How to redirect a URL path in IIS?
- ExpressJS : res.redirect() not working as expected?
- htaccess – Redirect to subfolder without changing browser URL
- php refresh current page?
- How do you redirect HTTPS to HTTP?
- How to manage a redirect request after a jQuery Ajax call
- Redirect website after specified amount of time
- How to use $_SERVER[‘HTTP_REFERER’] correctly in php?
- window.location.replace() not working to redirect browser
- javascript window.location in new tab
- Page redirect after certain time PHP
- Nodejs – Redirect url
- Generic htaccess redirect www to non-www
- Redirect after Login on WordPress
- Redirect old php link to wordpress link in .htaccess
- Redirect old php link to wordpress link in .htaccess
- Safely redirect old WordPress blog links to new WP blog
- Double slashes on WordPress Admin URL redirects to wp-login
- Cant login to wp-admin (redirecting to homepage), But CAN login to wp-login.php
- Cant login to wp-admin (redirecting to homepage), But CAN login to wp-login.php
- Page Redirection in WordPress
- Verifying that I have fully removed a WordPress hack?
- How to force a 404 on WordPress
- Resolve a custom post type name vs. page permalink conflict (same slug)
- Disable front end to use as CMS only?
- Redirect Restricted Page to 404
- How to redirect non-logged in users to a specific page?
- “Too many redirects” ONLY when trying to access wp-admin page
- How to prevent automatic redirection of 404 errors and “incorrect” URLs?
- Which hook should be used to add an action containing a redirect?
- Admin Page Redirect
- If a hacker changed the blog_charset to UTF-7 does that make WordPress vulnerable to further attacks?