Hi there,
It sounds like your website might have been compromised, which can indeed be a serious issue, especially if you rely on it for your blog and it ranks well on Google. Here’s what you can do to address the situation:
- Scan for Malware: Use security plugins or online scanners to check your WordPress site for malware or suspicious files. There are many reputable plugins available for WordPress security, such as Wordfence or Sucuri Security.
- Update Everything: Make sure your WordPress core, plugins, and themes are all up-to-date. Outdated software can be vulnerable to security breaches.
- Change Passwords: Immediately change all your passwords, including your WordPress admin password, FTP/SFTP passwords, and database passwords. Use strong, unique passwords for each account.
- Check User Accounts: Review all user accounts on your WordPress site. Delete any suspicious or unauthorized accounts, and consider implementing two-factor authentication for added security.
- Review File Permissions: Ensure that file permissions on your server are properly configured to prevent unauthorized access.
- Backup Your Site: If you have backups of your website, now is a good time to restore from a clean backup. Make sure the backup is from a time before the compromise occurred.
- Contact Your Hosting Provider: Reach out to your hosting provider for assistance and to report the security incident. They may be able to provide additional insights or support in resolving the issue.
- Implement Security Measures: Consider implementing additional security measures such as security plugins, firewalls, and regular security audits to prevent future attacks.
- Monitor Activity: Keep an eye on your website’s activity logs for any suspicious behavior. This can help you detect and respond to security threats more quickly in the future.
It’s crucial to act quickly and decisively to address security breaches and protect your website and its visitors.
Hope this will help in resolving this issue