Possible Hack

First you should change the salt keys in your wp-config.php file to log out all logged in users. https://www.wpbeginner.com/wp-tutorials/how-to-automatically-change-wordpress-salt-keys/

Then, you’ll need to check the server logs for suspicious activity around the time of that login/or via that login user’s IP. If your username + password have been compromised the you need to discover how e.g.
– scan your local machine for viruses
– if on shared hosting, report this to your host and check if this is related to any other breaches in your server neighbourhood
– conduct an audit of WordPress core/plugins/themes : Are they all up to date? were all downloaded from www.remarpro.com (e.g. through the wordpress dashboard)?
– is your php version still supported? e.g. 5.6. or above?
– what happens when you run a wordfence scan?

Hi @athletebydesign

Apologies for the delay in replying. Please follow our site cleaning guide here:

https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/

Thank you.