What to do if your website is hacked
Any website can be hacked as I’ve found out the hard way. If you host your website with me, I will take care of any hacking at no extra charge as quickly as possible. My hosted websites have been hacked a few times and the first couple times I paid hundreds of dollars to get them fixed, but recently I found a service that restored my hosting service within 24 hours at a fraction of the cost. If you need a good website security service, I highly recommend We Watch Your Website. They’ll fix a hacked website and then regularly monitor your files for a whole year for a nominal yearly fee.
Once your files are restored, it’s always a good idea to get your software, plugins and themes up-to-date. Then you should remove any unused plugins and themes and change your hosting account, website access and FTP passwords (and check to see if any new FTP users were added and remove them). Lastly, check your WordPress Dashboard “Users” and remove any users that may have been added by the hackers.