WordPress has been hacked, now what?

WordPress has been hacked, now what?
datum-geschreven 11 Oct 2023

WordPress is often hacked through vulnerable scripts. We still call it hacking because there has always been someone who wrote an automated script, and their advertisements appear on your website due to the hack. In fact, it’s more automation than hacking, as the script works 24/7 without the hacker being involved anymore.

But once you have an advertisement or your website is sending spam due to the hack, it’s important to get rid of it.

Restoring the hacked website

You can follow this step-by-step guide to restore your hacked website:

  1. First, make a backup of all data and the database
    The data includes the entire www/httpdocs folder.
    You can often export the database through phpMyAdmin or using a backup plugin.
  2. Try to update as much as possible
    Download WordPress and manually upload it to the server (using an FTP program). Also, replace the plugins with new ones and, if possible, the theme.
    Note: Updating the theme may sometimes cause style changes. Only consider this if you have the necessary knowledge to adjust the settings/style.
  3. Check your server for backdoors and unwanted files
    A hack never comes alone. Besides the modifications to your website through advertising injection, there are usually files and codes (see WPbeveiligen detection tool) on the server that allow the hacker and their script to regain access to your website.
  4. Check all plugins and themes for vulnerabilities
    You can do this using this website.
    If your plugins contain vulnerabilities, it’s recommended to use alternatives.
  5. Secure your WordPress website
    The hack has entered your website, and without security, it will happen again.
    Install a good security plugin on your website and configure it.
  6. Afterwards, verify that your website is fully restored
    You can do this through webmaster tools or using the Sucuri malware scan.

Good luck!

It’s a significant task that requires knowledge and patience. If you’re unable to do it, you can contact us. We restore WordPress websites on a weekly basis and provide a guarantee for our services!

De meeste artikelen worden geschreven door Mathieu Scholtes, de eigenaar van WPBeveiligen. Op de hoogte blijven van het laatste WordPress nieuws? WordPress tips? WordPress aanbiedingen?
Connect dan op Linked-in!

Heb je een vraag? Tip of gedachte? Deel die!

Breng me op de hoogte
0 Reacties
Inline Feedbacks
Bekijk alle reacties