Site spammed, again

If a site has already been compromised, updating is not the fix.

Keeping the site up to date with each update would have.

No backups also?

The backups were copies of the compromised data. Also, I forgot to mention that commenting is off and also you cannot register a user ID.

The backups were copies of the compromised data

Sites need to be maintained. With proper site maintenance that would not have occurred, in my (many) years of experience.

The Codex covers all this:

https://codex.www.ads-software.com/

@e_panagio

The Codex contains some good information that covers things you can do to clean your site, as well as some steps you can take to minimize the chance of similar issues happening in the future.

Carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are two.