Site/User Account compromised?

If there’s admin accounts added and you didn’t do that then your site is compromised.

Please remain calm and give this a good read.

https://codex.www.ads-software.com/FAQ_My_site_was_hacked

When you have successfully deloused your site then consider giving this a read too.

https://codex.www.ads-software.com/Hardening_WordPress

Is it possible for my original admin account to have been deleted? All I see is my admin account, which looks normal except for the username (which I have never paid attention to before).

All the scans of my site have come back clean, so hopefully that’s a good sign.

In addition to the advice Jan gave you, I would suggest creating a new admin account and then delete your current admin account. Also be sure to install a security plugin.

Thanks, I’ll do that. Do I need to do anything to transfer my posts to my new admin account?

When you delete the current admin account it should ask if you want to transfer posts, etc. to another account.

OK, thanks. I’m backing up now, just to be safe.