Is my WordPress site hacked? 11 signs and how to check
To find out whether your WordPress site is hacked, look for the eleven signs below, then confirm with five checks: the user list, core file checksums, PHP files in uploads, the database, and Google Search Console. Any single strong sign, such as an administrator you didn’t create, means you should treat the site as hacked until you have proved otherwise.