tomfishHello,
I believed my WordPress site was hacked. Someone deleted all my images inside wp-content/uploads. I believe the same person made an admin account. I did some research inside my database and found:
User: brooke
Name: Brooke Sanchez
Pass: brooke
User registered: 00/00/0000 00h00min
I didn't get an email telling me a new user registered.
Does anybody know what happened? Did the hacker only hack my ftp login/password and then checked out the wp-config for my DB password?
I changed all passwords (users/DB/ftp). I suppose that's enough?
Any ideas?
