Hacked WordPress Repair and Security
Hacked WordPress sites cleaned properly, the way in found and closed, and the site hardened so it does not happen again. Plus security reviews for sites that want to stay ahead of attacks.
Clean is not done until the way in is closed
Most hacked sites that get cleaned and then reinfected were never really clean. The spam was removed, but the backdoor and the hole the attacker came through were still there.
I clean from known-good sources, hunt for backdoors where scanners miss them, and find how the attacker got in. Then I close it and harden the site, and you get a written report of what happened and what changed.
What you get
Malware cleanup
Core, plugins and themes replaced with clean copies, and the database scanned for injected code.
Backdoor hunting
Uploads, must-use plugins, config files, cron jobs and hidden admin accounts checked by hand.
Root cause
The vulnerable plugin, weak password or neighbor site found, and closed.
Hardening
Updates, login protection, file editing off, security headers and least-privilege accounts.
Blocklist reviews
Review requests to Google and Search Console once the site is clean, to lift any warnings.
Monitoring
File change and downtime alerts with iDownAlert, so anything new is caught fast.
The process
Every project is scoped in writing before work starts, so you know what is being built and what it costs.
- Contain the damage and take a full copy of the hacked site as evidence.
- Clean from known-good sources and remove every backdoor found.
- Find and close the way in, then rotate every password and key.
- Harden the site and request reviews from Google if it was flagged.
- A written report and monitoring for the following weeks.
Recent projects
Frequently asked
I reply within one business day, and hacked sites get priority. If the site is redirecting visitors or serving malware, ask your host to take it offline while you wait.
Because the cause was never found. A backdoor was left behind, or the outdated plugin or weak password the attacker used is still there. Finding that is the part of a cleanup that matters most.
No. Your posts, pages, products and orders are kept. Only infected files and injected code are removed.
Yes. A security review checks updates, users, plugins, server settings like the PHP version, and backups, with a list of fixes in order of risk.
Other ways I can help
Get your site clean and keep it that way
Tell me what you are seeing: redirects, warnings, spam or strange files. I will reply with next steps.