Hacked twice via theme-editor.php

Yup, I’ve had WordPress hacked ~10 times this year already so I’m getting pretty good at getting them back up. It’s crazy – I don’t know why my clients’ sites are being targeted. Apart from Iran, we’ve had trouble from Saudi Arabia.

Well first I need to fix whatever WordPress core and theme files they’ve wrecked, so I’ve logged in via FTP and fixed those up plus removed all the spammy links/porn/etc left on the server. They usually replace the index.php (both core and theme), and the header/footer/page files of the theme.

I’ve been extremely lucky that they’ve left my WP admin email address intact, therefore I can reset my WP password. Once I’ve reset my password (which they always change) I go through my pages/SEO and make the necessary corrections.