WP Clinic
Log in Sign up

SECURITY FINDING

Cryptomining script injected on the home page

What it is

The home page loads a cryptomining script. Visitors' browsers get used to mine cryptocurrency for whoever injected it, without their consent — this is essentially always a sign of compromise, never a legitimate feature.

How to fix it

Install the WordPress Plugin and run AI Repair to remove this immediately (with an automatic backup and rollback) — this is not something to leave in place while you investigate.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.