XAF Log in

My website has been hacked: what should I do?

Updated on 08/10/2026

  1. Immediately change all passwords (cPanel, FTP, database, website administrators).
  2. Restore a clean backup from before the hack (JetBackup).
  3. Update the CMS, the theme and all plugins; delete unused ones.
  4. Open a ticket: we can analyse the files and help you clean up.
Still having the problem?

Test your domain with our diagnostic tools or open a ticket: our team will check your account.

Was this article helpful?
Contact support