Install the fix hacked wordpress site Firewall Plugin. Quit and this plugin investigates requests with heuristics that are simple to identify obvious attacks.
A simple way would be to use a few built-in tools. First of all, don't allow people run a web host security scan, to list the files in your folders and automatically backup your entire web hosting account.
Harness Scanner goes seeking anything suspicious through the files on your site comment database and place tables. You are also notified by it for plugin names. It doesn't remove anything, it simply warns you for threats.
What if you go to WP-Content/plugins, can you see Find Out More that folder? If so, upload this blank why not look here Index.html file inside that folder as well so people can't see what plugins you might have. Because if your version of WordPress is up to date, if you are using a plugin or an old plugin with a security hole, then someone can use that to get access.
These are. Put a blank Index.html file in your folders, run your web host security scan and backup your entire account.