SECURITY FINDING

Unrecognized external links on the home page

What it is

The home page links to external sites we don't recognize. Links to unknown external sites can be perfectly legitimate, but injected spam or redirect links are a common symptom of a compromised site.

How to fix it

Check that you recognize every external domain listed — remove any link you don't recall adding.

In depth

Your website's home page contains links pointing to websites outside of your own domain that you may not have intentionally placed there. This is concerning because hackers who gain access to your site sometimes inject hidden or obvious links to other websites, either to send your visitors somewhere malicious, to boost those sites' search engine rankings, or to damage your site's reputation. Even if the links look innocent, they can harm your credibility with search engines and visitors. To fix this, simply log into WordPress, go to your home page editor, review every link that points to another website, and delete any that you don't remember adding yourself. If you're unsure about a particular link, delete it to be safe—it's better to remove a legitimate link than to leave a malicious one in place. After cleaning up, strongly consider changing all your WordPress passwords and running a security scan to see if hackers made other changes to your site.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.