WordPress Hacked to Point to Drug Company

Any idea how they did this?

Could be a server exploit, could be a bad plugin or theme, or captured passwords or… You get the idea.

If it’s a site you manage then you may want to start with the reading list.

You need to start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Anything less will probably result in the hacker walking straight back into your site again.

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

It wasn’t a site we manage. A relative came to us because it seems that a plugin was not updated by the previous person managing the site. Thank you for all the links. It will definitely help. I definitely have a lot of reading ahead of me.