How to clean up a WordPress site after wp2shell.
A step-by-step cleanup guide for WordPress sites that ran a vulnerable version during the wp2shell attacks, covering files, users, the database, and the hosting setup.
About me
Local SEO, WordPress security, technical audits, and website modernisation at a price point that makes sense for small and medium businesses.
IslandSEO.tech is a slow-built, long-term website care and SEO service for companies around Koh Samui and similar island markets. The domain is booked for the long run, so the plan is not to sprint, spam, or fake scale.
Big Bangkok agencies have their place. Many island companies do not need that machine. They need clear advice, safe updates, readable reports, and someone who can fix things without turning every button colour into a strategy workshop.
How I work
I follow a clear process for every project. No black boxes, no invented urgency, no retainers you did not ask for.
Review first
I look at what you actually have before suggesting what you need. No upsell without evidence.
Plain language
Reports and emails are written for business owners, not developers. If something is unclear, ask.
Your accounts
Everything you pay for belongs to you. Logins, domains, analytics. All yours.
Honest timelines
Realistic estimates. I do not promise what I cannot deliver.
Long-term thinking
I prefer sustainable setups over quick fixes that need replacing next year.
No manufactured dependency
If the work is done, the work is done. I do not inflate scope to keep billing.
From the blog
A step-by-step cleanup guide for WordPress sites that ran a vulnerable version during the wp2shell attacks, covering files, users, the database, and the hosting setup.
How an incomplete or unverified Google Business Profile makes your Koh Samui business harder to find, and what to fix first.
Work with me
Send the details and I will reply within one working day. No automated responses, no offshore handoffs.
Get in touch