Look at all of the ‘related’ links to the right of your question for help with a hacked site.
I would reinstall everything (WP, themes, plugins), check htaccess files (in all folders, not just the site root folder), change all site access passwords (ftp, host, email), check your local computer, look for unexpected files (in all folders, sort by date to help find anomalies).
If this is above your skillset, professional help may be required.
Added
For my own reference, I created a post about the things I do to fix a hacked site: http://securitydawg.com/recovering-from-a-hacked-wordpress-site/ .But the googles (and a search here) will give you much guidance on how to recover.
Related Posts:
- What’s the effect if this malware if infected your WP?
- Malware on site [closed]
- How to find the backdoor of the hack
- My wordpress site was hacked – is my htaccess file compromised?
- My WordPress Blog sends malicious traffic to other sites [closed]
- Hacked website redirect, only on desktop, help with restoring it [closed]
- Hacked WordPress website, as notified by Google Search Console, what to do? [closed]
- How was my WP site hacked [closed]
- If a WP install is hacked, can it spread to other domains on a server?
- Find and Replace text in the entire table using a MySQL query
- What is this code in my theme’s footer.php causing chmod permission warnings? [closed]
- Is it a good idea to rename the “index.php” in “wp-admin” folder to avoid being hacked?
- How to fight this wp-info.php exploit? [closed]
- Prevent Hacking of WordPress Site [closed]
- Suspicious URLs being loaded after hack and restore
- Server hacked: correct contents of wp-uploads directory? [closed]
- Site hacked with malware [closed]
- Copy wordpress website pages and content
- How do I know if my WP Theme is using infamous TimThumb?
- Spam pages hack? [closed]
- Check for malicious code?
- Why would a hacker add this code to each post, and how to do mass cleanup?
- Is the current spate of hacks related to the recent security fix?
- I have removed the malware from our website however, when I tried again to search the word from Google it is still there [closed]
- Have I been hacked? Mysterious code at the top of theme files [closed]
- Strange codes in my wordpress site and my website is running too slow [closed]
- Spam Content Serving from old cached version of site?
- How to solve wordpress redirection (no malware was found)?
- how can i find malware code and remove from wordpress site to stop it redirecting to hackers click view pages
- Help determining if the following are legitimate files
- My blog was hacked? WP posting random posts
- Have I been hacked – getting new site setup email for 8 localhost wordpress sites
- Site Hacked – WordPress Divi Site – Cannot find where to fix the issue? [closed]
- malware in wordpress installer on dreamhost. [closed]
- Where I can find a list of WordPress security risks?
- looking for indoxploit hack solution [closed]
- Why functions.php file automatically empty?
- Bruteforce attack from 127.0.0.1?
- WordPress installer attack
- Why wordpress is hitting another url
- Where do hackers usually run their hacking script? [closed]
- Malicious Code in Index.php WordPress [closed]
- WP Site Hacked, Serp Google Spam [closed]
- Redirected You too Many Times and Homepage Not Loading
- WordPress Redirect Hack
- Strings of malicious code to look for after a hack
- Hacked/cloaked sitemap [closed]
- Not able to change WordPress admin email. Someone added another admin credentials
- My WordPress Website Redirect to bigbricks.org and other site
- How to manage a redirect request after a jQuery Ajax call
- Double slashes on WordPress Admin URL redirects to wp-login
- Old blog/ and blog/feed/ URLs not working after moving blog to top-level via .htaccess
- Permalink redirection from ‘Day and name’ to ‘Post name’
- Multisite non www domain gives registration error but should redirect to www.domain.com
- Where does the 404 redirection happen?
- Change Dashboard url
- WordPress subdomain wp-admin redirects to main domain
- Disabling the X-Redirect-By response header
- Disabling HTTPS redirection for migration
- How to disable the default WordPress redirect to non-www URLs?
- Redirect parent taxonomy to it’s child
- Handle regular expression based redirects without .htaccess
- Redirect some of the languages on a multi-language site
- 301 (static page instead latest posts)
- Why is there a status message “302 Found” on top of the site?
- Efficient way to check local WordPress php files and Database for malicious code? [duplicate]
- How to add array [closed]
- redirecting an entire WP site from one top level domain to another
- Missing domain http://./wp-… in redirects
- Working with Reverse Proxies and Multisite Installation
- Problem using the word “RSS” as a tag
- Force User Login
- Writing a link cloaking plugin
- Import RSS as posts with redirect?
- How can I prevent caching of wp_redirect?
- How to redirect a unique link based on login status
- Redirect Category Media ‘URL’ when clicked
- Changing post depending upon where you’re redirected from?
- Redirect WooCommerce checkout to cart
- How to log into WordPress via GET/POST
- 302 redirect *.at/site redirecting to .comsite
- Loading /wp-content/uploads/site as /site/
- when contact form7 submited domain redirects to example.com means (example domain)
- Change permalink structure with post id
- How to manage around 90k 301 redirects after migration from old CMS
- Multisite (with nested paths) wp-admin redirect loop
- Local domain remap with proxy : Infinite 301 redirect, bad URL typo
- mydomain.com/wp-login redirects to wordpress.com/wp-login
- Redirecting a POST to a php script
- Clone a Post Tite and Custom Field into Custom Post type
- automaticly redirect link problem on update
- Redirection error after posting a comment on a custom type post
- Multisite: Redirect Subsite Administrator to Subsite Home Page, Bypassing Dashboard
- wp_signon not working fine and 302 moved temporarily?
- How to link that “logged in” in “you must be logged in to post a comment” with custom login page on WordPress?
- Simple WordPress function / plugin to redirect a site
- How to use multiple 404 Error Pages in WordPress
- How to use the HTTP API (wp_remote_get) instead of cURL?
- Post Migration Site Migration Redirects All Known Solutions Attempted
- In Nginx, how can I rewrite all http requests to https while maintaining sub-domain?