Revisa si en tu web en Wordpress tienes instalado alguno de estos plugins que te detallo, porque si es así debes revisarlo urgentemente:
https://wordpress.org/plugins/duplicator/
https://wordpress.org/plugins/themegrill-demo-importer/
https://wordpress.org/plugins/profile-builder/
https://wordpress.org/plugins/flexible-checkout-fields/
https://themerex.net/
https://wordpress.org/plugins/async-javascript/
https://wordpress.org/plugins/wd-google-maps/
https://wordpress.org/plugins/modern-events-calendar-lite/
INFORME: https://www.zdnet.com/article/hackers-are-actively-exploiting-zero-days-in-several-wordpress-plugins/