{"id":429,"date":"2013-05-06T04:21:54","date_gmt":"2013-05-06T04:21:54","guid":{"rendered":"http:\/\/www.ultimatewb.com\/blog\/?p=429"},"modified":"2025-04-29T11:45:34","modified_gmt":"2025-04-29T18:45:34","slug":"wordpress-website-hacked-how-to-fix-it","status":"publish","type":"post","link":"https:\/\/www.ultimatewb.com\/blog\/429\/wordpress-website-hacked-how-to-fix-it\/","title":{"rendered":"WordPress website hacked? How to fix it…!"},"content":{"rendered":"
\n
\"\"<\/a><\/figure><\/div>\n\n

If your website isn’t displaying the way it should – for example the page header doesn’t display – and\u00a0your WordPress blog\u00a0prints out\u00a0an error instead of displaying your awesome blog posts – and you haven’t changed anything –\u00a0 it means your website has been hacked.\u00a0\u00a0 Chances are it is from your WordPress blog\u00a0or its\u00a0third party plugins you are using.\u00a0 Perhaps from a backdoor, like when in 2011\u00a0three popular WordPress plugins (AddThis, WPtouch, and W3 Total Cache), had malicious backdoors added to them via the plugin repository<\/a>.\u00a0 That is why it is important to keep your WordPress blog and plugins up-to-date, especially when there are security fixes released.\u00a0 If you have UltimateWB, and WordPress integrated with it, you can still upgrade your WordPress from its admin panel without worrying about the integration being broken – if needed, you just go to your UltimateWB website Admin Panel, Pages > Edit Page > Blog, and click the link to update your blog integration! Easy!<\/p>\n

Ok, so how to fix your website that has been hacked, and make sure\u00a0it doesn’t get hacked again and again\u00a0– here’s\u00a02 easy steps to do it:
(by the way, you might want to get a backup first, but also make sure you have some anti-virus software installed on your computer! Best to backup in zip\/compressed formats, for extra security.)<\/p>\n

1) Upgrade all your software files – manually.\u00a0<\/strong> You should delete all your current software\/WordPress files, and then upload the new ones.\u00a0 Make sure you don’t delete your uploaded content though, for example uploaded images, files, etc.\u00a0 For WordPress,\u00a0these files are under your\u00a0\u00a0wp-content folder<\/strong>.\u00a0 If you upgrade automatically, you might not be catching the backdoor if it’s an extra file, as it might not get deleted.<\/p>\n

2) After step 1, your website\/blog should look great, back to normal.\u00a0 But, you might not be done yet!\u00a0<\/strong> You might have missed the backdoor extra file injected on your server.\u00a0 If you miss the backdoor file, next time it is accessed, your website will be broken again.\u00a0 You should check your raw access logs.\u00a0 These are logs keeping track of the traffic to your website, on each access – not just the entry file like in your traffic statistics.\u00a0 If you don’t know\u00a0where these are, ask your web hosting company.\u00a0 You will want to skim through the lines, checking for any weird\u00a0files being accessed – you will want to delete these files that weren’t part of your website before.<\/p>\n

Ok, now you’re done.\u00a0 Check to make sure your website is running smoothly.\u00a0 Take a backup of your website\/database on a continuous basis.\u00a0 Sometimes when your website gets hacked, you can lose your data.<\/p>","protected":false},"excerpt":{"rendered":"

If your website isn’t displaying the way it should – for example the page header doesn’t display – and\u00a0your WordPress blog\u00a0prints out\u00a0an error instead of displaying your awesome blog posts – and you haven’t changed anything –\u00a0 it means your … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[306,304,307,305,303],"class_list":["post-429","post","type-post","status-publish","format-standard","hentry","category-general","tag-fix-backdoor","tag-fix-website","tag-remove-backdoor","tag-website-hacked","tag-wordpress-hacked"],"_links":{"self":[{"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/posts\/429"}],"collection":[{"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/comments?post=429"}],"version-history":[{"count":4,"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/posts\/429\/revisions"}],"predecessor-version":[{"id":5725,"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/posts\/429\/revisions\/5725"}],"wp:attachment":[{"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/media?parent=429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/categories?post=429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ultimatewb.com\/blog\/wp-json\/wp\/v2\/tags?post=429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}