Today I realized that my WordPress blog was hacked. I noticed, because the title was altered to something like:
+ADw-/title+AD4-Hacked By *** +ADw-meta http-equiv+AD0AIg-refresh+ACI content+AD0AIg-5+ADs-URL+AD0-http://***+ACIAPg +ADw-DIV style+AD0AIg-DISPLAY: none+ACIAPgA8-xmp+AD4-
After a while I couldn't login with my usual password, so I went to the host's cPanel and I tried to reset my WordPress password in the
wp_users database, with the help of phpMyAdmin. There, I can see that somebody altered the login information to "indoxploit" and maybe the password MD5 hash was also altered, because when I searched it in google I got this page hit:
Then I simply added a new MD5 hash and then I was able to login to my WP admin dashboard, I updated the WordPress version to the newest one, and the plugins too. What to do besides these actions?