How to clean up WordPress backend?

[dariuszz]

Hi,

Id like to ask you if you know how to cleanup Wordpress backend?

Frontend works ok, however when I log in to the dashboard it redirects me to a non existing website instantly; it redirects me to a website of a company that sold me the WordPress theme I use. Potentially that website has been hacked and maybe some of my files or database was compromised.

I appreciate any help in this matter.

Best,
Dariuszz

[polonus]

Find instructions here: https://www.dreamhost.com/blog/guide-clean-your-wordpress-website/
and in particular https://www.altushost.com/how-to-troubleshoot-a-misbehaving-wordpress-theme/
Also scan at https://hackertarget.com/wordpress-security-scan/
Remember to set user enumeration and Directory listing to "disabled".
Update and fully patch CSP, theme and plug-ins, also use the latest PHP version, when used.

Linting here may also help, especially the security section, that Nelly may serve up:
https://webhint.io/scanner/

polonus (volunteer 3d party cold recon website security analyst and website error-hunter)

[dariuszz]

Hi,

Thanks for your reply and all the information.

It's sorted now. After some study of the issue I've decided to change the theme manually in cPanel and the problem evaporated.

Best,
Dariusz

[polonus]

Witam Dariusz,

You are welcome.
We are always glad when we can be of assistance, and see to it that you could get your theme configuration rightly set.
Stay safe and secure both online and offline.

Wszystkiego dobrego.

pozdrawiam,

polonus