Issues after being hacked (GDPR Compliance)

Hello there,

I have a small gaming website in Europe / Germany that has been hacked using a security vulnerability in a plugin called “GDPR compliance”. It’s been a rather big issue the last week for a lot of users.

For further information regarding the security vulnerbility, please take a glimpse over here: https://blog.sucuri.net/2018/11/erealitatea-net-hack-corrupts-websites-with-wp-gdpr-compliance-plugin-vulnerability.html

Well, i got rid of the additional admin accounts, and i also deleted a small script line left by the hackers on every single page of my website. Sadly, it’s still not working properly: since being hacked, some of my editors elements don’t show up. For example, i cannot edit my sidebars anymore, as well as my header-navigation. I can’t even change my admin-passwort (the “generate password” button simply doesn’t work anymore).

Do you have any suggestions what to do? I’m grateful for any help you can provide!

Thank you very much!