Blog hacked please help

Oh, I forgot to add that I did put my blog into maintenance mode until my hosting company completes my SSL certificate. I don’t want to install it until I know that my blog is “clean” though. It is https://collarcitybrownstone.com

Thank you

slightly off topic.. but try changing your config file to permissions 555, then change your sql password

see if that resolves your issue

Hello, My blog was hacked. I did change the password, but the hacker was able to get in again and register as an administrator. I changed my password two more times, but still the hacker got in.

You PC may be compromised as well. Or the attacker is getting in some other way such as on the server level.

It’s often quoted but still a really accurate response:

You need to start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Anything less will probably result in the hacker walking straight back into your site again.

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Thank you all so much for such a fast response. I am not tech savvy at all, so my blog host is going to have to help me with these instructions.