Recover a Hacked Site
Stay calm - most sites can be cleaned and restored.
- Open a ticket immediately - we can scan your account and isolate the issue.
- Change all passwords: control panel, FTP, database, and CMS admin.
- Restore from a clean backup if you have one (TackHost keeps weekly backups - ask us to restore a known-good copy).
- Update everything - core, themes, and plugins - to close the hole that was exploited.
- Scan for malware using your control panel's Malware Scanner and remove flagged files.
- Remove unknown admin users and unfamiliar files from
public_html.
Prevent it next time
Follow Securing Your WordPress Site and Keeping Your Account & Website Secure.