WP site hijack?

Go through you plugins and theme and make sure they are all up to date.

Then take a look at (https://codex.www.ads-software.com/FAQ_My_site_was_hacked) and consider https://codex.www.ads-software.com/Hardening_WordPress.

I actually have not seen this issue floating around, but I did just started helping out here in the forums.

Would you do me a favor and list the plugins and theme you have installed/active? I can then take a look around a bit and see what I can find.

Thanks for the quick response newsdevice!

It looks like most of my plugins are out of date. Installed plugins are

Akismet
IntenseDebate
Extended Comment Options
Chartbeat
Jetpack
MediaElement.js – HTML5 Audio and Video
podPress
Raw HTML
VideoPress
WP Super Cache

But the only active one is Raw HTML.

Since my dashboard is screwed up too would it be a better idea to delete the installation and start again? The site was still in development so I don’t really mind. That way I can have a fresh install and do a harden on it.

Thanks for your help!

If it’s a fresh install, something you don’t mind dumping and rebuilding, then I would suggest doing just that.

I always suggest deleting or renaming the default admin login (the first one created by the WP install) with something much different and using a 10+ digit password; I use phrases.

Thanks for the list. Not familiar with Raw HTML plugin, will look around a bit later tonight.

You got hacked: https://sitecheck.sucuri.net/results/supervillain.com.au

See FAQ: My site was hacked ? WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress ? WordPress Codex and tell your host. Change all passswords. Scan your own PC.