WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture...
My website redirects to suspicious pages. What should I do if it may have been compromised?
Unexpected redirects, altered pages or unfamiliar user accounts should be treated as signs of a possible security incident. Contact your hosting provider and, where possible, temporarily restrict public access to reduce visitors’ exposure. Preserve logs and a copy of the affected files for investigation, keeping them separate from clean backups.
Using a trusted device, change the passwords for affected accounts and revoke unfamiliar access. Review files, plugins, themes and administrator accounts. Restoring a backup only helps if it predates the compromise and you also fix the underlying cause; otherwise, the problem may return. If you cannot identify the changes, seek specialist help rather than deleting files at random.
