Notes from inside hacked WordPress sites.
All articles, page 2
WordPress Hacked? How to Fix, Clean and Recover Your Site (2026)
Think your WordPress site has been hacked? Learn how to confirm the infection, clean every compromised file and database entry,…
WordPress Casino Spam: Detection, Removal & Prevention (2026 Guide)
WordPress casino spam is a black-hat SEO infection that injects gambling, betting, and “free spins” content into your site but…
How to Scan Your WordPress Website for Malware Using Guardian Gaze
In this guide, we'll show you how to scan WordPress for malware using the free Guardian Gaze plugin and explain…
How to Do a WordPress Security Audit (Step-by-Step for Site Owners)
Learn how to perform a complete WordPress security audit with this step-by-step guide. Check for vulnerabilities and keep your WordPress…
Abandoned & Nulled WordPress Plugins: A Critical Security Risk
Two of the most common entry points for WordPress compromises aren’t exotic zero-days or sophisticated attacks. They’re plugins that stopped…
WordPress Brute Force Attack Prevention: The Complete 2026 Guide
A WordPress brute force attack is an automated attempt to log into your site by guessing username and password combinations…
How to Fix the “This Site May Be Hacked” Warning in Google Search Results (2026)
If Google is showing “This site may be hacked” under your search result, Google has detected spam, malware, or unauthorized…
WordPress Japanese SEO Spam Hack: Detection, Removal & Prevention (2026)
The Japanese SEO spam hack (also called the Japanese keyword hack) injects thousands of auto-generated Japanese-language pages into your WordPress…
WordPress Redirect Hack: Detect & Remove It (2026 Guide)
A WordPress redirect hack sends your visitors to scam sites, fake pharmacies, sketchy ad networks, or malware downloads, usually only…
WordPress Pharma Hack: Detection, Removal & Prevention (2026 Guide)
The WordPress pharma hack is a black-hat SEO infection that injects pharmaceutical spam (Viagra, Cialis, Tramadol, Phentermine) into your site,…
Get new posts in your inbox.
One email per post. Threat walkthroughs, agency playbooks, and product updates. Unsubscribe anytime.