{"id":1195,"date":"2021-09-16T07:57:34","date_gmt":"2021-09-16T07:57:34","guid":{"rendered":"https:\/\/www.34sp.com/kb\/?p=1195"},"modified":"2026-08-05T10:08:46","modified_gmt":"2026-08-05T10:08:46","slug":"how-to-clean-a-hacked-wordpress-site","status":"publish","type":"post","link":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site","title":{"rendered":"How to clean a hacked WordPress site"},"content":{"rendered":"\n<div class=\"wp-block-columns has-background is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\" style=\"background-color:#f6faff\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Applies to:<\/strong><br>Reseller Hosting<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Difficulty:<\/strong><br>Intermediate<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"has-black-color has-text-color wp-block-paragraph\"><strong>Time Needed:<\/strong><br>30 minutes<\/p>\n<\/div>\n<\/div>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site\/#Introduction\" >Introduction<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site\/#Take_a_Snapshot\" >Take a Snapshot<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site\/#Logging_in_via_SSH\" >Logging in via SSH<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site\/#Preparing_your_site_for_cleaning\" >Preparing your site for cleaning<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site\/#Isolating_the_hacked_content\" >Isolating the hacked content<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site\/#Setting_up_a_new_WordPress_installation\" >Setting up a new WordPress installation<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Introduction\"><\/span>Introduction<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is a step-by-step walkthrough for cleaning up a hacked WordPress website, on Reseller Hosting.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Although this guide cannot guarantee your site will look exactly as it did prior to being hacked, it will clean your website of all malicious content and ensure it is safe to use again.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Take_a_Snapshot\"><\/span>Take a Snapshot<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Important: We strongly recommend taking a snapshot of your website before starting this guide. Please refer to our guide on &#8216;<a href=\"https:\/\/www.34sp.com\/kb\/how-to-manage-snapshots\" data-type=\"post\" data-id=\"858\">How to take a Snapshot<\/a>&#8216;.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Logging_in_via_SSH\"><\/span>Logging in via SSH<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 1<br>Configure SSH access to your account<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Shell access to your account uses the same details as SFTP, so you may need to follow our guide on&nbsp;&#8216;How to Manage Your SFTP Access Details&#8217;, in order to update your password. You will also need to&nbsp;unlock your SFTP account.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"450\" height=\"270\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1.jpg\" alt=\"\" class=\"wp-image-1386\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1.jpg 450w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1-300x180.jpg 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 2<br>Connect to your account using SSH<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">You will need to connect to your account using SSH in order to access WP-CLI. Exactly how to do this will depend on the operating system that you are using.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">Windows<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">You should use a client such as&nbsp;<a href=\"https:\/\/www.chiark.greenend.org.uk\/~sgtatham\/putty\/\" target=\"_blank\" rel=\"noreferrer noopener\">PuTTY<\/a>.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">Mac OS X<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">The ssh command is available from Terminal (Applications &gt; Utilities &gt; Terminal).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To connect, you should access your account with your SFTP username. In this example, the username is &#8216;user&#8217;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once connected, you will need to change directory into httpdocs, by typing the following:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>cd httpdocs<\/code><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"450\" height=\"270\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-002.1.jpg\" alt=\"\" class=\"wp-image-1387\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-002.1.jpg 450w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-002.1-300x180.jpg 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Preparing_your_site_for_cleaning\"><\/span>Preparing your site for cleaning<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 1<br>List the active plugins<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">After you have logged into your site via SSH, you will be in the&nbsp;<code>\/httpdocs<\/code>&nbsp;directory of your website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To produce a list of the plugins installed on your website, enter the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>wp plugin list<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Then make a list of your active plugins in a text file (such as Notepad or TextEdit), as you will need these later on.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-001.1.jpg\" alt=\"\" class=\"wp-image-1196\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-001.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-001.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-001.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 2<br>List the active theme<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">You then need to list your active theme, which you can do by running the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>wp theme list<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Again, make a note of your active theme name in a text file (such as Notepad or TextEdit), as you will need this later on.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-002.1.jpg\" alt=\"\" class=\"wp-image-1197\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-002.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-002.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-002.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 3<br>Export the website content<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Next, you need to export your website&#8217;s content (posts, pages etc). To do this, run the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>wp export<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This will generate an XML file that you will need later on. Copy and paste the path of the file (i.e. \/var\/www\/vhosts\/mydomain.com\/httpdocs\/sitename.wordpress.2019-03-06.000.xml) into a text file (such as Notepad or TextEdit).<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-003.1.jpg\" alt=\"\" class=\"wp-image-1198\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-003.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-003.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-003.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Isolating_the_hacked_content\"><\/span>Isolating the hacked content<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 1<br>Go to the parent directory<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Now you have all the information you need from your hacked website. The next step is to isolate the hacked content, by renaming the \/httpdocs directory.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Firstly, go to the parent directory with the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>cd ..<\/code><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-004.1.jpg\" alt=\"\" class=\"wp-image-1199\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-004.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-004.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-004.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 2<br>Rename your \/httpdocs directory<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Then rename the \/httpdocs directory with the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>mv httpdocs httpdocs-hacked<\/code><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-005.1.jpg\" alt=\"\" class=\"wp-image-1200\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-005.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-005.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-005.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 3<br>Create a new \/httpdocs directory<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Now create a brand new \/httpdocs directory with the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>mkdir httpdocs<\/code><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-006.1.jpg\" alt=\"\" class=\"wp-image-1201\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-006.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-006.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-006.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Setting_up_a_new_WordPress_installation\"><\/span>Setting up a new WordPress installation<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 1<br>Login to your account<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Firstly, you\u2019ll need to login to your 34SP.com account at&nbsp;<a href=\"https:\/\/account.34sp.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/account.34sp.com<\/a>.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"450\" height=\"270\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/10\/login-001.1-1.jpg\" alt=\"\" class=\"wp-image-1604\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/10\/login-001.1-1.jpg 450w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/10\/login-001.1-1-300x180.jpg 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 2<br>Choose \u2018Manage Websites\u2019<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Once you have logged in, click on the&nbsp;<strong>\u2018Manage Sites\u2019&nbsp;<\/strong>icon.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"450\" height=\"270\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/10\/manage-sites-001.1.jpg\" alt=\"\" class=\"wp-image-1653\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/10\/manage-sites-001.1.jpg 450w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/10\/manage-sites-001.1-300x180.jpg 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 3<br>Choose your Reseller account<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">From the &#8216;Manage sites&#8217; menu, select the site you are working on from the list of Reseller websites.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"802\" height=\"362\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.36.50.png\" alt=\"\" class=\"wp-image-2607\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.36.50.png 802w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.36.50-300x135.png 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.36.50-768x347.png 768w\" sizes=\"auto, (max-width: 802px) 100vw, 802px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 4<br>Select &#8216;WordPress Tools&#8217;<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">From the list of available site options select &#8216;WordPress Tools&#8217;.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"758\" height=\"430\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.39.04.png\" alt=\"\" class=\"wp-image-2608\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.39.04.png 758w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.39.04-300x170.png 300w\" sizes=\"auto, (max-width: 758px) 100vw, 758px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 5<br>Install WordPress<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">You now need to install a new version of WordPress to your newly created \/httpdocs directory.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Click &#8216;Install WordPress&#8217; and start the installation process, ensuring that the installation path matches the path of your new clean directory.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Run the installer and this will set up a brand new WordPress installation to your site&#8217;s directory.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"544\" height=\"306\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.40.59.png\" alt=\"\" class=\"wp-image-2609\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.40.59.png 544w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.40.59-300x169.png 300w\" sizes=\"auto, (max-width: 544px) 100vw, 544px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"741\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.41.08-1024x741.png\" alt=\"\" class=\"wp-image-2610\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.41.08-1024x741.png 1024w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.41.08-300x217.png 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.41.08-768x556.png 768w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/Screenshot-2026-08-05-at-10.41.08.png 1138w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 6<br>Check your uploads<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Before you can start transferring data from your hacked site to your new one, you need to scan your uploads directory for any malicious content. To do this, you will need to manually check the uploads folder for any file types that should not be there.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This usually means any .php or .exe files but can extend to other file types. Uploads will typically only hold image, text, and cached css files, but depending on your plugins there can be other safe file types.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To access your uploads you can step in to it using the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>cd httpdocs-hacked<\/code>\/wp-content\/uploads<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Please note:<\/strong>\u00a0If you are not confident checking and cleaning this directory using SSH you can do it manually by downloading your snapshot and cleaning the uploads folder on your PC, then upload it using SFTP.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\"><\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 7<br>Sync your uploads<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Now go to the parent directory again, with the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>cd ..<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Then go to your new \/httpdocs directory with the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>cd httpdocs<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Then sync your old uploads directory with your new uploads directory, with the following command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>rsync -avz ..\/httpdocs-hacked\/wp-content\/uploads\/ wp-content\/uploads\/<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Please note:<\/strong>&nbsp;If WordPress is installed in a subdirectory, either on your hacked site or your new install, you will need to update the rsync path accordingly.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-008.1.jpg\" alt=\"\" class=\"wp-image-1204\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-008.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-008.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-008.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 8<br>Install &#8216;WordPress Importer&#8217; plugin<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Next, you need to install the&nbsp;<strong>WordPress Importer<\/strong>&nbsp;plugin, so that you can import the content from your hacked site into your new WordPress installation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To do this, simply enter the following command.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>wp plugin install wordpress-importer --activate<\/code><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-009.1-1.jpg\" alt=\"\" class=\"wp-image-1206\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-009.1-1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-009.1-1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-009.1-1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 5<br>Install your plugins<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Now install the rest of your plugins, using the list of plugins you generated in Step 1 of the previous section&nbsp;<a href=\"https:\/\/www.34sp.com\/kb\/329\/how-to-clean-a-hacked-wordpress-site#preparing\">&#8216;Preparing your site for cleaning&#8217;<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Enter the following command, replacing&nbsp;<code>&lt;PLUGIN LIST&gt;<\/code>&nbsp;with your list of plugins, separated by spaces.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>wp plugin install &lt;PLUGIN LIST&gt; --activate<\/code><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-010.1.jpg\" alt=\"\" class=\"wp-image-1207\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-010.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-010.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-010.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 9<br>Install your theme<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Now install the theme, using theme name generated in Step 2 of the previous section&nbsp;&#8216;Preparing your site for cleaning&#8217;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Enter the following command, replacing&nbsp;<code>&lt;THEME NAME&gt;<\/code>&nbsp;with your theme name.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>wp theme install &lt;THEME NAME&gt; --activate<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Please note:<\/strong>&nbsp;This step will only work if your theme is in the WordPress repository. If your theme was supplied by a third party (for example, downloaded from a theme website or via a web designer), then you will need to contact them to obtain a new copy.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-011.1.jpg\" alt=\"\" class=\"wp-image-1208\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-011.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-011.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-011.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h5 class=\"wp-block-heading\">STEP 10<br>Import your content<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Now import your website content, using the XML file you generated in Step 5 of the previous section&nbsp;<a href=\"https:\/\/www.34sp.com\/kb\/329\/how-to-clean-a-hacked-wordpress-site#preparing\">&#8216;Preparing your site for cleaning&#8217;<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Firstly, update the&nbsp;<strong>httpdocs<\/strong>&nbsp;part of the path to&nbsp;<strong>httpdocs-hacked<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, if your output reads:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\/var\/www\/vhosts\/mydomain.com\/httpdocs\/sitename.wordpress.2019-03-06.000.xml<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Update it to:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\/var\/www\/vhosts\/mydomain.com\/httpdocs-hacked\/sitename.wordpress.2019-03-06.000.xml<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Then simply enter the following command, replacing&nbsp;<code>&lt;PATH TO FILE&gt;<\/code>&nbsp;with the updated path to your file.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>wp import &lt;PATH TO FILE&gt; --authors=create<\/code><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"540\" src=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-012.1.jpg\" alt=\"\" class=\"wp-image-1209\" srcset=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-012.1.jpg 900w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-012.1-300x180.jpg 300w, https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/reseller-wordpress-hacked-012.1-768x461.jpg 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n\n<h5 class=\"wp-block-heading\">STEP 11<br>Congratulations!<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">You\u2019ve completed all the steps to ensure your WordPress site is clean. You now have a new WordPress site, using the same theme, plugins and content your hacked site was using.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You may notice that your website still isn&#8217;t looking or behaving exactly as it was prior to the hack. This could be for a number of reasons. For example, if your hacked WordPress website had any custom settings, then these will need updating on your new WordPress install too. This applies to your plugins and theme as well.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you run into any problems following the above steps, or you have completed the steps but still feel your website is not fully restored, don&#8217;t hesitate to&nbsp;<a href=\"https:\/\/www.34sp.com\/web-hosting-support\">contact our support team<\/a>&nbsp;who will be happy to advise you.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Applies to:Reseller Hosting Difficulty:Intermediate Time Needed:30 minutes Introduction This is a step-by-step walkthrough for cleaning up a hacked WordPress website, on Reseller Hosting. Although this guide cannot guarantee your site&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[192],"tags":[140],"class_list":["post-1195","post","type-post","status-publish","format-standard","hentry","category-reseller-hosting","tag-hacked"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to clean a hacked WordPress site | Knowledge Base<\/title>\n<meta name=\"description\" content=\"This is a step-by-step walkthrough for cleaning up a hacked WordPress website, on Reseller Hosting.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to clean a hacked WordPress site | Knowledge Base\" \/>\n<meta property=\"og:description\" content=\"This is a step-by-step walkthrough for cleaning up a hacked WordPress website, on Reseller Hosting.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/34SPWebsiteHosts\/\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/34SPWebsiteHosts\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-16T07:57:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-05T10:08:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"450\" \/>\n\t<meta property=\"og:image:height\" content=\"270\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Kayleigh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@34sp\" \/>\n<meta name=\"twitter:site\" content=\"@34sp\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kayleigh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site\"},\"author\":{\"name\":\"Kayleigh\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#\\\/schema\\\/person\\\/daa527106d35aab27ee3d39e12112172\"},\"headline\":\"How to clean a hacked WordPress site\",\"datePublished\":\"2021-09-16T07:57:34+00:00\",\"dateModified\":\"2026-08-05T10:08:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site\"},\"wordCount\":1242,\"publisher\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.34sp.com\\\/kb\\\/wp-content\\\/uploads\\\/2021\\\/09\\\/wordpress-wpcli-001.1-1.jpg\",\"keywords\":[\"hacked\"],\"articleSection\":[\"Reseller Hosting\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site\",\"url\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site\",\"name\":\"How to clean a hacked WordPress site | Knowledge Base\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.34sp.com\\\/kb\\\/wp-content\\\/uploads\\\/2021\\\/09\\\/wordpress-wpcli-001.1-1.jpg\",\"datePublished\":\"2021-09-16T07:57:34+00:00\",\"dateModified\":\"2026-08-05T10:08:46+00:00\",\"description\":\"This is a step-by-step walkthrough for cleaning up a hacked WordPress website, on Reseller Hosting.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site#primaryimage\",\"url\":\"https:\\\/\\\/www.34sp.com\\\/kb\\\/wp-content\\\/uploads\\\/2021\\\/09\\\/wordpress-wpcli-001.1-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.34sp.com\\\/kb\\\/wp-content\\\/uploads\\\/2021\\\/09\\\/wordpress-wpcli-001.1-1.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/how-to-clean-a-hacked-wordpress-site#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kb.34sp.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to clean a hacked WordPress site\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#website\",\"url\":\"https:\\\/\\\/kb.34sp.com\\\/\",\"name\":\"\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kb.34sp.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#organization\",\"name\":\"34SP.com Limited\",\"url\":\"https:\\\/\\\/kb.34sp.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kb.34sp.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/34sp-logo-horizontal-blue.png\",\"contentUrl\":\"https:\\\/\\\/kb.34sp.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/34sp-logo-horizontal-blue.png\",\"width\":3000,\"height\":1286,\"caption\":\"34SP.com Limited\"},\"image\":{\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/34SPWebsiteHosts\\\/\",\"https:\\\/\\\/x.com\\\/34sp\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kb.34sp.com\\\/#\\\/schema\\\/person\\\/daa527106d35aab27ee3d39e12112172\",\"name\":\"Kayleigh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cee8c3564bca088c8f3300447726634e7e34d11b2002b3de29996ba4da754343?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cee8c3564bca088c8f3300447726634e7e34d11b2002b3de29996ba4da754343?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cee8c3564bca088c8f3300447726634e7e34d11b2002b3de29996ba4da754343?s=96&d=mm&r=g\",\"caption\":\"Kayleigh\"},\"description\":\"As part of the Customer Experience team, Kayleigh ensures that all of our customers get the highest quality of service. Kayleigh started with 34SP in 2014 and is one of our WordPress experts. Kayleigh provides all of our support staff with ongoing training and works to improve their knowledge across a broad range of subjects.\",\"sameAs\":[\"https:\\\/\\\/www.34SP.com\",\"https:\\\/\\\/www.facebook.com\\\/34SPWebsiteHosts\",\"https:\\\/\\\/www.instagram.com\\\/34sp\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/34sp.com\",\"https:\\\/\\\/www.pinterest.co.uk\\\/34SP\",\"https:\\\/\\\/x.com\\\/34sp\",\"https:\\\/\\\/www.youtube.com\\\/c\\\/34SPcomLtd\"],\"url\":\"https:\\\/\\\/kb.34sp.com\\\/author\\\/wp7ctmdod3qm\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to clean a hacked WordPress site | Knowledge Base","description":"This is a step-by-step walkthrough for cleaning up a hacked WordPress website, on Reseller Hosting.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site","og_locale":"en_US","og_type":"article","og_title":"How to clean a hacked WordPress site | Knowledge Base","og_description":"This is a step-by-step walkthrough for cleaning up a hacked WordPress website, on Reseller Hosting.","og_url":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site","article_publisher":"https:\/\/www.facebook.com\/34SPWebsiteHosts\/","article_author":"https:\/\/www.facebook.com\/34SPWebsiteHosts","article_published_time":"2021-09-16T07:57:34+00:00","article_modified_time":"2026-08-05T10:08:46+00:00","og_image":[{"width":450,"height":270,"url":"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1.jpg","type":"image\/jpeg"}],"author":"Kayleigh","twitter_card":"summary_large_image","twitter_creator":"@34sp","twitter_site":"@34sp","twitter_misc":{"Written by":"Kayleigh","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site#article","isPartOf":{"@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site"},"author":{"name":"Kayleigh","@id":"https:\/\/www.34sp.com/kb\/#\/schema\/person\/daa527106d35aab27ee3d39e12112172"},"headline":"How to clean a hacked WordPress site","datePublished":"2021-09-16T07:57:34+00:00","dateModified":"2026-08-05T10:08:46+00:00","mainEntityOfPage":{"@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site"},"wordCount":1242,"publisher":{"@id":"https:\/\/www.34sp.com/kb\/#organization"},"image":{"@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site#primaryimage"},"thumbnailUrl":"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1.jpg","keywords":["hacked"],"articleSection":["Reseller Hosting"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site","url":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site","name":"How to clean a hacked WordPress site | Knowledge Base","isPartOf":{"@id":"https:\/\/www.34sp.com/kb\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site#primaryimage"},"image":{"@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site#primaryimage"},"thumbnailUrl":"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1.jpg","datePublished":"2021-09-16T07:57:34+00:00","dateModified":"2026-08-05T10:08:46+00:00","description":"This is a step-by-step walkthrough for cleaning up a hacked WordPress website, on Reseller Hosting.","breadcrumb":{"@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site#primaryimage","url":"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1.jpg","contentUrl":"https:\/\/www.34sp.com\/kb\/wp-content\/uploads\/2021\/09\/wordpress-wpcli-001.1-1.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.34sp.com/kb\/how-to-clean-a-hacked-wordpress-site#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.34sp.com/kb\/"},{"@type":"ListItem","position":2,"name":"How to clean a hacked WordPress site"}]},{"@type":"WebSite","@id":"https:\/\/www.34sp.com/kb\/#website","url":"https:\/\/www.34sp.com/kb\/","name":"","description":"","publisher":{"@id":"https:\/\/www.34sp.com/kb\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.34sp.com/kb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.34sp.com/kb\/#organization","name":"34SP.com Limited","url":"https:\/\/www.34sp.com/kb\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.34sp.com/kb\/#\/schema\/logo\/image\/","url":"https:\/\/www.34sp.com/kb\/wp-content\/uploads\/2022\/06\/34sp-logo-horizontal-blue.png","contentUrl":"https:\/\/www.34sp.com/kb\/wp-content\/uploads\/2022\/06\/34sp-logo-horizontal-blue.png","width":3000,"height":1286,"caption":"34SP.com Limited"},"image":{"@id":"https:\/\/www.34sp.com/kb\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/34SPWebsiteHosts\/","https:\/\/x.com\/34sp"]},{"@type":"Person","@id":"https:\/\/www.34sp.com/kb\/#\/schema\/person\/daa527106d35aab27ee3d39e12112172","name":"Kayleigh","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/cee8c3564bca088c8f3300447726634e7e34d11b2002b3de29996ba4da754343?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cee8c3564bca088c8f3300447726634e7e34d11b2002b3de29996ba4da754343?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cee8c3564bca088c8f3300447726634e7e34d11b2002b3de29996ba4da754343?s=96&d=mm&r=g","caption":"Kayleigh"},"description":"As part of the Customer Experience team, Kayleigh ensures that all of our customers get the highest quality of service. Kayleigh started with 34SP in 2014 and is one of our WordPress experts. Kayleigh provides all of our support staff with ongoing training and works to improve their knowledge across a broad range of subjects.","sameAs":["https:\/\/www.34SP.com","https:\/\/www.facebook.com\/34SPWebsiteHosts","https:\/\/www.instagram.com\/34sp\/","https:\/\/www.linkedin.com\/company\/34sp.com","https:\/\/www.pinterest.co.uk\/34SP","https:\/\/x.com\/34sp","https:\/\/www.youtube.com\/c\/34SPcomLtd"],"url":"https:\/\/www.34sp.com/kb\/author\/wp7ctmdod3qm"}]}},"_links":{"self":[{"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/posts\/1195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/comments?post=1195"}],"version-history":[{"count":7,"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/posts\/1195\/revisions"}],"predecessor-version":[{"id":2617,"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/posts\/1195\/revisions\/2617"}],"wp:attachment":[{"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/media?parent=1195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/categories?post=1195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.34sp.com/kb\/wp-json\/wp\/v2\/tags?post=1195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}