If you suspect compromise, act quickly to reduce damage and prevent reinfection.
- Change passwords immediately for hosting, CMS admin, database, email, and FTP access.
- Remove malicious files or restore from a known clean backup.
- Update the application, themes, plugins, and extensions.
- Scan the site and local devices used to manage it.
- Open a support ticket if you need platform-level assistance.