Hacked recently, site url changed in db

Does your site has the WP GDPR plugin installed? The plugin had critical security issues that allow attackers to change the site URL.

https://www.wordfence.com/blog/2018/11/trends-following-vulnerability-in-wp-gdpr-compliance-plugin/

Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

Thank you Steven will follow the guidelines tonight when I get back, and cheers Liew I will take a look, I think we are using it.

I managed to track down where the issue was and was able to quickly change the site url back to ours, but with it on my mind I thought I would seek some professional advice.

Thanks guys

@accend4web

Good day,

I have just run into exactly the same issue and having to change url back to normal manually every time. Have you managed to locate the source of the hack?

Many thanks,
Naim

@accend4web Same here. Any update on what you found?