I have a wordpress website that has been hacked. I've used Wordfence do get rid of the hack and updated everything. I then go into wp-config and change the secret key and then into phpmyadmin to change my password and username.

 

I can log in the first time but when I try again the username and password has been changed. The hack on the actual view of the website does not appear, it just changes my username and password.

 

Any ideas what I can do to stop this?

Did you try WP Security Scan?

Did you try WP Security Scan?

Yeah I gave that a go and still nothing.

Have you checked your raw server logs?

 

They might shed some light on what's going on and whether theres any suspicious activity.

 

Rich.

Edited April 22, 201313 yr by eCenica

hello! the same thing happens, restore everything and everything is back to normal.

change all passwords, cpanel, db, change the prefix WP.

I use

wp better security

Wordfence

after a time

But as hacker and change back to the user an pass ..

Not noticed another problem, only change the username and password!

You could solve the problem?

which theme you use?

sorry for my English!!