During a critical period when four of my WordPress websites were infected and rendered unusable, I took the initiative to recover and rebuild them completely from scratch — without using any site backups. Using only the original database and media files, I manually recreated each site’s structure, restored content, and reinstalled essential plugins and themes.
This process not only ensured the removal of all infected files but also improved the performance and security posture of each restored site.
No clean backup available
Infection spread across WordPress core, plugins, and themes
Had to identify clean data (media, SQL) and rebuild the rest
Ensured site integrity and accuracy without plugin dependency
🧩 Extracted usable data (SQL database + wp-content/uploads)
⚙️ Set up fresh WordPress installations locally via XAMPP and cPanel
🛠️ Cleaned and restructured databases using Notepad++ and phpMyAdmin
🔗 Re-linked post and media references
🎨 Rebuilt the site layout using matching themes (free/licensed)
🧼 Ensured all themes/plugins were updated and secure
🛡️ Hardened site security with best practices and security plugins
WordPress (manual install)
phpMyAdmin + MySQL
Notepad++, 7-Zip
XAMPP (for testing)
Theme builders like Elementor / WoodMart (as needed)
✅ Successfully restored 4 infected websites
✅ Improved website speed and security post-recovery
✅ Learned to manually rebuild WordPress sites using only core data
✅ Avoided recurring infections by deploying hardened setups
