What it is

A setting stored in the WordPress database has a random or hash-like name and holds an encoded blob instead of a normal value — a pattern malware uses to hide its configuration or command-and-control data inside wp_options.

How to fix it

Confirm it isn't from a legitimate plugin, then delete the option (back up the database first). If you're not sure how, install the WordPress Plugin: its Security tab applies fixes like this one automatically.

In depth

Your website's database contains a suspicious setting that shouldn't be there, likely created by malware or a compromised plugin to hide malicious code or maintain unauthorized access to your site. This type of hidden setting allows attackers to control your website without your knowledge, potentially inserting harmful content that could damage your reputation or expose your visitors to attacks. You should immediately create a complete backup of your website, then use a security plugin like Wordfence or Sucuri to scan and remove the suspicious option automatically. If you prefer to remove it manually, you can access your site's database through your hosting control panel, locate the option by its exact name, and delete it through the database management tool. After removing it, run a full security scan again to confirm the threat is gone and check whether any other malware remains on your site.