Articles / Malware
WordPress malware
WordPress malware rarely announces itself. These articles show the signs, explain the most common infections in plain language, and walk through cleaning up properly.
RSS FeedLatest WordPress malware articles
12 Signs Your WordPress Site Has Been Hacked (and What to Do Next)
Some hacks shout. Most whisper. Here are twelve signs your WordPress site has been hacked, how to check each one in a few minutes, and what to do first.
Read articleWordPress Redirect Hack: How to Find It, Remove It and Stop It Coming Back
Your site looks fine to you, but customers land on spam. A plain-English guide to the WordPress redirect hack: where it hides, how to remove it and why it returns.
Read articleJapanese Keyword Hack: How to Spot It, Clean It Up and Keep It Gone
Hundreds of Japanese product pages are indexed under your domain and you never made them. Here is what the Japanese keyword hack is and how to clean it up step by step.
Read articleThis Site May Be Hacked: How to Remove Google's Warning
Google has put 'This site may be hacked' next to your listing. Here is what it means, how to confirm it in Search Console, and how to clean up and ask Google to take it off.
Read articleWordPress Backdoor: How to Find and Remove One
A WordPress backdoor is a hidden way back into your site that survives a cleanup. Here are the eight forms it takes, how to hunt for each, and how to remove it for good.
Read articleWordPress Pharma Hack: How to Find and Fix It
The WordPress pharma hack fills your site with drug spam that only Google sees. Here is how to detect it, where it hides, the right cleanup order and how to get Google to recheck.
Read articleGet new articles by email
One short email when a new article is out, plus the WordPress threats worth knowing about. No spam, unsubscribe any time.
Questions
WordPress malware: questions
How do I know if my WordPress site has malware?
Common signs are visitors being sent to spam sites, strange pages in Google results, new admin accounts you did not create, and warnings from Google or your host.
Can I remove WordPress malware myself?
Often, yes, if you work carefully: back up first, find every changed file and database entry, replace core files, remove unknown users and change every password.
Does Stack Guard scan for WordPress malware?
Yes. Stack Guard Free runs manual malware scans and checks core files against the official copies. Pro adds scheduled scans, quarantine and file change monitoring.