Recovering from a compromised site

Immediate steps

1. Change control panel, FTP and database passwords.
2. Restore from a backup taken before the compromise.
3. Update the application core, themes and plugins.

Restoring without updating usually leads to a second compromise through the same hole.