Never worry about your WordPress security again.

The attack is almost certainly not targeted at your site. Websites often run the same software as millions of others, and hackers will find vulnerabilities that they can exploit en masse.

If you are running a popular WordPress plugin which has a vulnerability, it could be that your site is one of many thousands targeted that day.

If your website shared a hosting space with another site (for instance in one cPanel account), then this could be the reason. It's unlikely that the web host at large has a problem but it's not unheard of. We can investigate and diagnose for you.

Sometimes the vulnerability is enabled by the host having default weak permissions on file access, which enables a WordPress config file to be read across accounts.

Chances are you are either not dealing with the underlying cause of the hack. This could be two things.

First, it could be a vulnerability that keeps getting exploited. For example an out of date plugin or theme.

Second, it could be that there is some infected code you are not removing. Sometimes an attacker will exploit a vulnerability and leave a backdoor. They may then leave it many months before then using the backdoor to show an infection on your site.

Our team can scan through to find these backdoors.

WordPress is a frequent hacking target for several reasons. It can be extended with a vast array of plugins and themes, each of those extensions have code bases which are fully readable, and crucially it is extremely popular software. Hacking syndicates compete to find vulnerabilities and exploit websites, including your website.

Exploits usually manifest themselves either as a complete site defacement, or as a redirect to an external phishing site. However, sometimes a site may appear normal but actually have malicious content uploaded somewhere in the site code.