Clean and repair a hacked WordPress
Recognise an infection, find the backdoors, remove the malware and get your WordPress site back on its feet, step by step.
How to know if your WordPress site is hacked: 10 telltale signs
Not sure your site is clean? Here are 10 concrete signs of a hacked WordPress and how to check each one, before you run a pointless cleanup or let a real infection sit.
Read Clean & repairCleanly reinstall WordPress core (without losing your site)
Replacing WordPress core files with a clean version clears out a good chunk of an infection. Here's how to do it without touching your content or your settings.
Read Clean & repairClean a hacked .htaccess file on WordPress
The .htaccess is the favorite hiding spot for malicious redirects and access blocks. Here's how to spot injected rules, remove them, and restore a clean file.
Read Clean & repairRestoring WordPress after a hack: getting your content back
Content erased or hidden by the attacker? Here's how to recover your posts and pages: backups, Google cache, Wayback Machine, and what to do with no backup.
Read Clean & repairScanning a WordPress site for malware: the methods that actually work
Online tools, plugins, manual inspection: here's how to scan an infected WordPress, which to choose for your situation, and what no scanner can see.
Read Clean & repairFinding and removing a backdoor on WordPress
A backdoor is the door the attacker keeps open to come back after every cleanup. Here's where they hide in WordPress and how to track them down for good.
Read