Skip to content

Repair & Recover

Initial Assessment

Use security tools to scan your site and identify issues:

  • Wordfence: Comprehensive security scanner plugin
  • Sucuri: Malware detection and cleanup plugin
  • MalCare: Automated malware removal plugin
  • Tibus: We may contact you if we have detected/deleted malicious files within your site

Update Everything

1. WordPress Core Update

  • Update to the latest WordPress version
  • Check for security patches and hotfixes
  • Backup before updating

2. Plugin Updates

  • Update all active plugins to latest versions
  • Check plugin changelogs for security fixes
  • Remove any plugins with known vulnerabilities

3. Theme Updates

  • Update active theme to latest version
  • Check for theme security patches
  • Consider switching to a more secure theme if needed

Basic Security Fixes

Change Admin Credentials

  • Change admin username if it's "admin"
  • Update to a strong, unique password
  • Enable two-factor authentication

Remove Malicious Content

  • Delete suspicious files from uploads directory
  • Remove any unauthorized admin users
  • Clean up spam comments and posts

Basic File Permissions

  • Set correct file permissions (644 for files, 755 for directories)
  • Secure wp-config.php (600 permissions)
  • Check .htaccess file for malicious redirects

Security Plugin Configuration

Wordfence Setup

  • Configure firewall settings
  • Set up real-time scanning
  • Enable login security features

Basic Hardening

  • Hide WordPress version
  • Disable file editing in admin
  • Limit login attempts

When to Use Advanced Recovery

If basic repair doesn't resolve the issue, proceed to Advanced Recovery for:

  • Manual core file replacement
  • Deep database cleaning
  • Complete plugin/theme reinstallation