My site,, has been hacked, and I can't login to wp-admin.

Can you say how it has been hacked and what can I do to undo the damage? I have access to the host.

closed as off topic by fuxia Jun 23 '12 at 7:32

Questions on WordPress Development Stack Exchange are expected to relate to WordPress within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here. If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 5 down vote accepted

If you do a Google search, you will find many topics on this.

Here are some links:

First read this:

Then take a look at these links:

If you have access to your database, login using PHPMyAdmin and change admin username / password, delete users you don't know and change password for rest.

Then start the process of backing up data and do a clean install.

Note. If you can't find out how they got access to your site, doing a clean install and putting back data, will still leave whatever hole open.

Also not that backdoors (links / code) could have been added to your posts, so all content must be checked before you import exported data.

Not the answer you're looking for? Browse other questions tagged or ask your own question.