Solution FinderSolutions
  1. Home
  2. Situations
  3. WordPress hacked
Situation · Emergency · Berlin & Germany-wide

Your WordPress site was hacked.We bring it back clean.

Contain, restore, clean, patch, analyse – in that order. Even without an existing contract: we agree effort and cost with you up front.

No obligation · 15 minutes · reply usually within 24 hours

01

The situation

Your website suddenly redirects to strange pages, the browser warns visitors, unknown admin accounts appear in the backend – or your host has suspended the site. Often you only notice when customers call.

Most incidents we see have nothing to do with sophisticated hackers, but with updates nobody installed: an outdated plugin, a forgotten theme or a weak password.

02

Our solution

With an active KULIMO care plan we respond immediately; without one, after a quick agreement on effort and cost. Then we always follow the same order – so nothing gets lost and it doesn’t happen again.

After the clean-up we recommend ongoing maintenance: updates with functional checks, encrypted off-site backups, security and error monitoring and a monthly report. We also take over websites built by other agencies after a website check.

WordPress maintenance in detail
03

Process & details

What we do in an emergency:

  1. 01Contain
  2. 02Restore
  3. 03Clean
  4. 04Patch
  5. 05Analyse

Until we take over: change your WordPress and hosting passwords, inform your host and don’t delete anything yourself – the current state helps us find the entry point.

Report on WhatsApp

Companies working with KULIMO

Our clients, on the map

Every pin is a partnership. Hover the globe to see who we work with, and where.

4 clients worldwide

  • Adltortechnik

    Waiblingen, Germany

    ADL Tortechnik is a specialist company based in Waiblingen (Stuttgart region), focused on the planning, sale, installation and maintenance of modern door, gate and loading-bay technology.

    Visit site
  • Das Catering

    Germany

    Das Catering (Das Catering Berlin) is the full-service catering arm of the Berlin restaurant concept Die Stulle. Based at the same address in Berlin-Charlottenburg, the team caters private celebrations, brand events and corporate functions in Berlin and Brandenburg.

    Visit site
  • Die STULLE

    Berlin, Germany

    Visit site
  • Fixed quote before the project starts
  • 2 revision rounds per phase
  • Core Web Vitals as acceptance criterion
  • WCAG 2.1 AA & GDPR
  • Hosting with German partners
  • Website and logins belong to you
  • Owner-led studio in Berlin
What you get

This is what you get.

Every line is on our service page – nothing we don’t deliver.

  1. 01

    Contain

    Put the site into maintenance mode, lock compromised logins, rotate passwords and keys.

  2. 02

    Restore

    A clean state from the off-site backup – which is why tested backups are the most important part of maintenance.

  3. 03

    Clean

    Remove malicious code, unknown admin accounts, manipulated files and database entries.

  4. 04

    Patch

    Close the exploited gap – usually an outdated plugin or a weak password.

  5. 05

    Analyse

    Document the entry point, tighten monitoring, explain it to you in plain language.

Process

Four steps to the finish.

From the first call to the handover.

  1. 01

    Report

    Via WhatsApp, email or phone – with your domain and what you noticed.

  2. 02

    Agree

    With a care plan we start immediately; without one we agree effort and cost first.

  3. 03

    Restore & clean

    Contain, clean state from backup, remove malicious code, close the gap.

  4. 04

    Secure

    Report on the entry point, ongoing maintenance in the Basic or Premium plan if you wish.

Questions from search

Frequently asked questions

  • What should I do if my WordPress site was hacked?

    Stay calm, change your WordPress and hosting passwords, inform your host and don’t delete anything on your own. Then contain, restore from a clean backup, clean up, close the gap and analyse the entry point – that’s exactly what we take over.

  • Do you help if we don’t have a maintenance contract?

    Yes. Even without a contract you can contact us in an emergency – we agree effort and cost with you up front.

  • My WordPress site keeps getting hacked – why?

    Usually because a gap stayed open after the first clean-up: an outdated plugin, a forgotten theme, an unsupported PHP version or a weak password. That’s why patching and analysing the entry point are always part of the job.

  • Do you take over websites not built by KULIMO?

    Yes. After a website check we know the state of the installation. Onboarding often includes a tidy-up: removing unused plugins, catching up on updates, sorting out logins.

  • Is my website 100% secure after maintenance?

    No – nobody can honestly promise that. Regular updates, tested backups and monitoring reduce the risk significantly and make sure an incident is noticed early and fixed fast.