Hi.few days ago I saw son unknown user in my wordpress users and I deleted them. and days later these accounts are back.I suspected plugind and decied to delete some of them but “delete” option is removed in plugin page. There is also “forgottenl” folder in my public-html . I deleted it but after I visit any page of my site it will appear. there is also google search consode verify html file in my public-html.
I can’t tell the host is infected or somebody use wordpress to do these changes.