This page explains JUCRA Digital’s policy regarding hacked WordPress websites, emergency recovery assistance, and website care plan eligibility.
Provider: JUCRA Digital SL
Last Updated: 15th May 2026
Website compromises, malware infections, hacked plugins, malicious redirects, spam injections, and unauthorised access incidents are unfortunately common within the WordPress ecosystem.
JUCRA Digital may provide assistance with hacked WordPress websites depending on the client’s hosting arrangement, support plan status, and overall service relationship with us.
If your WordPress website has been hacked, you should contact us immediately before attempting random fixes, plugin removals, or restoring unknown backups.
Table of Contents
1. Free Recovery Eligibility
JUCRA Digital may repair hacked WordPress websites free of charge where all of the following conditions are met:
Hosted With JUCRA
The affected website must be hosted directly with JUCRA Digital.
Active Website Care Plan
The client must have an active JUCRA Digital Website Care Plan in place.
Established Client Relationship
The client must have maintained active services with JUCRA Digital for more than six months.
2. Website Care Plan Requirement
Website care plans exist specifically to help reduce the risk and impact of:
- WordPress compromises
- Plugin vulnerabilities
- Malware infections
- Outdated software risks
- Security weaknesses
Care plans may include services such as:
- WordPress updates
- Plugin updates
- Security monitoring
- Backup management
- Maintenance support
Further details regarding website care plans can be found here:
3. Clients Without a Care Plan
If your website is hosted with JUCRA Digital but you do not have an active Website Care Plan, JUCRA Digital is under no obligation to repair or recover a hacked website.
However, as a courtesy, we may:
- Perform an initial review of the incident
- Assess the likely cause of compromise
- Determine whether recovery is realistically possible
- Offer paid recovery assistance where appropriate
In some situations, we may instead recommend that specialist malware recovery companies are used, particularly where:
- The compromise is severe
- Core WordPress files are heavily modified
- Server-level compromise is suspected
- The website has repeated reinfections
- There is significant malware distribution involved
4. What Website Recovery May Involve
WordPress malware recovery can involve a significant amount of technical investigation and remediation work.
Recovery work may include:
- Malware identification and cleanup
- Removal of malicious redirects
- Database inspection and cleanup
- Replacement of infected WordPress core files
- Plugin vulnerability analysis
- Password resets
- Security hardening
- Backup restoration
- Spam or blacklist investigation
5. Guide Pricing Information
Where hacked website recovery falls outside of free care plan coverage, recovery work may be chargeable depending on:
- The severity of the compromise
- The time required for investigation
- The complexity of the website
- The extent of malware infection
- The availability of clean backups
Professional WordPress malware recovery services within the wider industry commonly range from several hundred euros upwards depending on complexity.
Any chargeable recovery work would normally be quoted after an initial review where possible.
6. Important Limitations
JUCRA Digital cannot guarantee that all hacked websites are recoverable or that all compromised data can be restored successfully.
- Some compromises may permanently damage files or databases.
- Third-party plugins and themes may introduce vulnerabilities outside our control.
- Compromised administrator credentials may allow reinfection if not corrected properly.
- Recovery success may depend heavily on available backups.
- Website downtime may occur during investigation or recovery work.
7. Prevention & Best Practices
The best protection against WordPress compromises is proactive maintenance and security management.
Recommended best practices include:
- Maintaining active care plans
- Keeping WordPress updated
- Keeping plugins updated
- Using strong passwords
- Limiting administrator access
- Removing unused plugins and themes
- Maintaining reliable backups
8. Summary
Care Plan Clients
Eligible clients with active care plans may qualify for free hacked website recovery assistance.
Non-Care Plan Clients
Recovery assistance may be limited, chargeable, or referred externally depending on the situation.
Prevention Matters
Regular maintenance, updates, backups, and security monitoring significantly reduce compromise risk.