Wp-Vcd WordPress Malware Hack Spreads. My WordPress site is hacked and infected with Malware. How do I repair a malware hack on my WordPress based website? Nasty little script I tell you. Upload the wrong plugin / or theme and it spreads…fast. We recently got contacted by a client due to a Malware hack on their WordPress based E commerce website. Their web designers would remove the infected script, just to find it re appears a day later. They would update core and all plugins. Run Sucuri scans and firewalls. But it always comes back. The infection of this is so much deeper.