A WordPress website was hacked using old-plugin-version vulnerabilities.
The result of the hack was that index.php
redirected Google to a Chinese website and hence the original SEO was corrupted but also new links were added to Google index like example.com/chinese-product
.
That was only visible with a Google User-Agent, so the result was visible on Google search index only, meaning a random user would only see the Google search result compromised, but not the website.
The site was then updated and fixed, all backdoors removed. Even with a Google agent, no compromised result was returned.
However, few weeks after, I can see that Google is adding to its index again URLs like example.com/chinese-product
.
How is that possible given that:
- The URL returns a 404 with a regular user-agent AND with Google's.
- I can see nowhere a resource pointing to that URL.
- Checks and scans reveal no intrusion or hack.
Could you please advice on what could be done?
Edit: Also, this seems that due to that compromised SEO and the example.com/chinese-product-in-chinese
language, the website was now removed from search results in English, without being banned (no alert in Google search console).