Clean and repair a hacked WordPress
Recognise an infection, find the backdoors, remove the malware and get your WordPress site back on its feet, step by step.
Clean & repair Clean a hacked .htaccess file on WordPress
The .htaccess is the favorite hiding spot for malicious redirects and access blocks. Here's how to spot injected rules, remove them, and restore a clean file.
Read
Clean & repair How to know if your WordPress site is hacked: 10 telltale signs
Not sure your site is clean? Here are 10 concrete signs of a hacked WordPress and how to check each one before you clean up.
Read
Clean & repair Cleanly reinstall WordPress core (without losing your site)
Replacing WordPress core files with a clean version clears out a good chunk of an infection. Here's how to do it without touching your content or your settings.
Read
Clean & repair Finding and removing a backdoor on WordPress
A backdoor is the door the attacker keeps open to come back after every cleanup. Here's where they hide in WordPress and how to track them down for good.
Read Clean & repair Restoring WordPress after a hack: getting your content back
Content erased or hidden by the attacker? Here's how to recover your posts and pages: backups, Google cache, Wayback Machine, and what to do with no backup.
Read
Clean & repair Scanning a WordPress site for malware: the methods that actually work
Online tools, plugins, manual inspection: here's how to scan an infected WordPress, which to choose for your situation, and what no scanner can see.
Read