SECURITY FINDING
Unrecognized external links on the home page
What it is
The home page links to external sites we don't recognize. Links to unknown external sites can be perfectly legitimate, but injected spam or redirect links are a common symptom of a compromised site.
How to fix it
Check that you recognize every external domain listed — remove any link you don't recall adding.
In depth
Your website's home page contains links pointing to websites outside of your own domain that you may not have intentionally placed there. This is concerning because hackers who gain access to your site sometimes inject hidden or obvious links to other websites, either to send your visitors somewhere malicious, to boost those sites' search engine rankings, or to damage your site's reputation. Even if the links look innocent, they can harm your credibility with search engines and visitors. To fix this, simply log into WordPress, go to your home page editor, review every link that points to another website, and delete any that you don't remember adding yourself. If you're unsure about a particular link, delete it to be safe—it's better to remove a legitimate link than to leave a malicious one in place. After cleaning up, strongly consider changing all your WordPress passwords and running a security scan to see if hackers made other changes to your site.
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.