Website safety guide
What to do when your WordPress site is hacked
If a WordPress site starts redirecting, showing warnings, sending spam, or behaving strangely, slow down. Random plugin installs and repeated failed fixes can make cleanup harder.
Checklist
What to check first.
- Do not delete the whole site without a backup copy
- Take screenshots of warnings and suspicious behaviour
- Check whether the host has recent clean backups
- Change administrator, hosting, and FTP/SFTP passwords from a clean computer
- Record which plugins/themes changed recently
- Check Google/Search Console or browser warnings if available
- Ask for help before restoring over evidence you may need
Need a second set of eyes?
Aceon can review the basic website risk signals and route the issue into hosting, backup, domain, WordPress, remote support, or data recovery help.
Request the free 5-minute checkRelated reading