# Recovering from a compromised site

https://demo.wisecp.com/ar/qaidat-al-marifa/maqala/recovering-a-compromised-site

### Immediate steps

1. Change control panel, FTP and database passwords.
2. Restore from a backup taken before the compromise.
3. Update the application core, themes and plugins.

Restoring without updating usually leads to a second compromise through the same hole.