figaro wrote an interesting post today on
Here’s a quick excerpt
Note: The following is made available under GPL from http://codex.wordpress.org/GPL. It has been edited significantly from its original form. There is no guarantee this information is accurate…use at your own risk.
—————————————————–
My WordPress blog has been hacked; or at least I think its been hacked. What do I do now?
The WordPress Exploit Scanner plugin can help detect damage so that it can be cleaned up. Other things you should do:
Change passwords for all blog users, including your own, with a role higher than Subscriber
If you upload files to your site via FTP, change your FTP password
Change your web hosting control panel (such as Cpanel) password
Completely remove all current WordPress core code and re-install the latest version of WordPress
Make sure you are only using trusted plugins and themes–those from wordpress.org or a trusted commercial developer
Remove all unused themes and plugins
Make sure all of your plugins and themes are up-to-date–it’s best to install [...]
Read the rest of this great post here
