|
Your WordPress, themes, and plug-ins are all exploited. Best course of action is to do a migration to a completely clean and new account. It can be with the same web host or another if you prefer. Set up your WordPress sites on the new account. Dump the data from your originating WordPress sites, import into your sites on the new account. Eliminate any theme and plug-in you are not using.
Then you need to be relentless about keeping WordPress, themes, and plug-ins updated or this will just happen again. WordPress is not a "set and forget" platform but is used for that purpose far too often. Check into auto updaters as well, they are not 100% but they can help out a lot.
Good luck, you have some work ahead of you.
|