wp-login.php 404 Error

I’d try reinstalling WordPress. You may be outdated at this point anyway.

You can also check your FTP to make sure that the wp-login.php file exists

After some further investigation this morning, I discovered thru my cPanel that an unauthorized Admin account is present. I am presuming this user got access, and then changed all my Admin email addresses, as I stopped getting notifications approximately 5/31. I ran a test comment on the site and didn’t get an email notification, meaning they must have changed my emails.

So my questions are:

– What is the proper steps to take to clean up the site and get my access back?
– How do I delete out this rogue Admin account?
– How do I get my Admin emails back?
– How do I get my wp-login.php back?
– How do I make sure once the rogue Admin user is deleted that there is no additional malice code on the site?

I want to be able to preserve all of my existing content and not have to redo it if possible.

Followup #2: Since this morning, I downloaded my wp-content folder and wp-config.php files. I then proceeded to completely delete and reinstall WordPress. I then brought in the old wp-content folder and wp-config.php file. However, then I get “Error establishing a database connection.”

Am I supposed to modify the wp-config.php file prior to uploading into the new WordPress install?

I then brought in the old wp-content folder and wp-config.php file.

Why? Were you not aware that they could be compromised?

No. So how do I get my old content back into the site?

Most of your site’s content will have been in your old database. Did you work your way through these resources?
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Anything less will probably result in the hacker walking straight back into your site again.

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Provided that you preserve your database, you can still save your content. You’ll want to make sure that you edit your wp_users table within the database.

Additionally, to connect to that database, you’ll have to re-enter the data that you had in your wp-config.php file prior to the issue.