Is there anyone who can help me log in to my website? I tried to log in, but the login page shows a CAPTCHA clickfix, and I don’t know how to resolve it. Even logging in directly from Hostinger to WordPress results in a blank white page.
2 Likes
Before you can log back in, you need to know which fix to use — so scan first:
scan your domain
↓
INFECTED? or CLEAN?
↓ ↓
malware fix plugin fix
Scan first — free, no login, instant verdict
Sucuri SiteCheck — paste your domain, get infected or clean in seconds. Second opinion: VirusTotal.
INFECTED
- hPanel → Security → Malware Scanner — free, auto-cleans infected files
- Files only, not your database — symptoms back after a clean scan = check
wp_options/wp_posts/wp_users, or Hostinger’s paid Site Cleanup ($95) covers the DB wp-content/mu-plugins/— check for files you didn’t put there, known backdoor spot, invisible in your normal plugin list- Rotate every password: WP admin, hPanel, FTP/SSH, database
- Ran the CAPTCHA’s command in Windows already? Scan that PC too
CLEAN
Broken security plugin, not a hack. Via File Manager or FTP:
- Rename
wp-content/object-cache.php→object-cache.php.off(Hostinger’s LiteSpeed cache is a known trigger for stuck login CAPTCHAs) - Or rename the plugin folder in
wp-content/plugins/(e.g.wordfence→wordfence-off) to disable it, log in, fix the CAPTCHA settings from inside
Get back in, either path
hPanel → Websites → [your site] → Admin Panel — skips the front-end login, straight into wp-admin.
Still stuck
hPanel → Files → Backups — weekly auto-backups on every plan. Restore to before this started.
That “CAPTCHA clickfix” is not a normal CAPTCHA. Do not click it, press Win+R, paste anything into PowerShell/Terminal, install an extension, or run a command copied from the page. These fake verification prompts are commonly used to trick people into executing malware.
The blank WordPress page is probably a separate server-side problem, usually a plugin/theme conflict, PHP error, memory issue, or corrupted update.
First: treat the CAPTCHA as a security incident
If you already followed the instructions or pasted anything:
- Disconnect the computer from the internet.
- Run a full antivirus/Malwarebytes scan.
- From a clean device, change your Hostinger, WordPress, email, and domain passwords.
- Revoke active WordPress sessions.
- Rotate hosting-panel passwords, FTP/SFTP passwords, database passwords, API keys, and WordPress salts.
- Check for unknown WordPress users, plugins, themes, scheduled tasks, and modified files.
- Ask Hostinger support to run a malware scan and review access logs.
Do not give anyone your Hostinger password, WordPress password, 2FA code, or recovery codes.
Fix the blank WordPress page
Before changing anything, create a backup of both:
Website filesDatabase
Then use Hostinger’s File Manager or SFTP.
1. Disable all plugins
Open:
public_html/wp-content/
Rename:
plugins
to:
plugins-disabled
Reload the login page and website. If they work again, a plugin caused the problem. Rename the folder back to plugins, then disable plugins individually until you identify the faulty one. WordPress and Hostinger both recommend this method when the dashboard is unavailable.
2. Test the theme
If disabling plugins does not help, open:
public_html/wp-content/themes/
Rename the active theme folder, for example:
my-theme
to:
my-theme-disabled
Make sure a default WordPress theme is installed. WordPress should then fall back to it. If the site loads, the issue is in the theme or its functions.php file.
3. Check the error log
Enable logging in wp-config.php, but do not display errors publicly:
define( 'WP_DEBUG', true );define( 'WP_DEBUG_LOG', true );define( 'WP_DEBUG_DISPLAY', false );
Reload the broken page once, then check:
wp-content/debug.log
Look for a plugin name, theme name, PHP fatal error, memory error, or missing file. Turn debugging off again after troubleshooting.
4. Check Hostinger settings
Also check:
- PHP version compatibility
- PHP memory limit
- Available disk space
- Recent WordPress/plugin/theme updates
- Hostinger malware scanner
.htaccess- Recent backups
If the issue started immediately after an update, restoring the last clean backup is often safer than randomly editing files. Hostinger lists plugins, themes, PHP compatibility, corrupted files, and memory limits among common causes of a blank WordPress page.
I would not hire anyone who asks you to run a command from the fake CAPTCHA. Get the site back through Hostinger File Manager/SFTP, inspect the logs, and use Hostinger support or a reputable WordPress developer if the site may have been infected.
!