What can I do if my website being hacked repeatedly? Print

Overview

If your website keeps getting hacked — especially if it's built on WordPress — the attacker likely still has a way in. Repeated hacks usually mean the entry point was never fully closed. Here's what to check and do.

Why WordPress Sites Get Hacked Repeatedly

1. Outdated WordPress core, themes, or plugins – The most common entry point.
2. Nulled or pirated plugins/themes – Often contain hidden backdoors.
3. Weak admin credentials – Easy to brute force.
4. Malicious admin users – Attackers create hidden admin accounts to regain access.
5. Backdoors left behind – Even after cleaning, hidden files let attackers return.
6. Infected plugins or themes – Reinstalling from a bad source re-infects the site.
7. Compromised hosting account – If cPanel or FTP is breached, all sites are at risk.
8. Outdated PHP version – Known vulnerabilities are exploited.

What You Should Do

1. Take the site offline temporarily – Prevent visitors from being infected or exposed.
2. Change all passwords – WordPress admin, cPanel, FTP, and database.
3. Update everything – WordPress core, themes, and plugins to the latest versions.
4. Remove unused themes and plugins – Fewer entry points.
5. Scan for malware and backdoors – Use security plugins (e.g., Wordfence, Sucuri) or manual file checks.
6. Check for hidden admin users – Delete any accounts you didn't create.
7. Review scheduled tasks and forwarding rules – Attackers often hide here.
8. Reinstall from clean sources – Only use official WordPress repositories.
9. Enable 2FA and a security plugin – Add layers of protection.
10. Check file permissions – Folders should be 755, files 644.
11. Monitor logs – Watch for repeated suspicious activity.

If It Keeps Happening

Repeated hacks mean the backdoor wasn't removed. A full clean rebuild — fresh WordPress install, clean theme/plugins, and restored content only — is often the only reliable fix.

Need Help?

You may open a support ticket to request us to lock both your website and database to secure your website.

We would like to remind you of the Administrator Service Fees associated with certain requests to ensure efficient resource allocation and service delivery. Please review the details below:

Website Restoration Fee

• A fee of RM50 will be applied for website restoration requests only if the restoration is requested more than once within a 6-month period.
• The first restoration request within a 6-month window will remain free of charge.

Website/Database Lock/Unlock Fee

• Locking a database is free of charge.
• A fee of RM50 will be applied for each request to unlock a database.