SECURITY FINDING
Cryptomining script injected on the home page
What it is
The home page loads a cryptomining script. Visitors' browsers get used to mine cryptocurrency for whoever injected it, without their consent — this is essentially always a sign of compromise, never a legitimate feature.
How to fix it
Install the WordPress Plugin and run AI Repair to remove this immediately (with an automatic backup and rollback) — this is not something to leave in place while you investigate.
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.