Post #3929651
2026-07-19 05:41 UTC
One of my sites did not auto-update to WP 7.0.2.
Got an email notification this morning that my administrator password was changed.
Oof. This is new to me. How do I properly clean-up? Already deleted the 4 new admin users, changed passwords, rotatd secrets, verified checksums.
Replies (1)
-
@denniskoch@phpc.social 2026-07-19 08:01
@dvk@toot.re Check the cron table for suspicious stuff (self healing malware). Check post_meta and options for script tags and similar.