My first step is not one you must take but I was helped by it. I had a good old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And then I did before I started my website, what I should have done. And here is where I would like you to start also. Learn how to protect yourself until you get hacked. The thing about how to fix hacked wordpress site and why so many of us recommend because it is easy to learn, it is. That is also a detriment to the health of our sites. We need to learn how to add a security fence.
Backup plug-ins is also important. You want to backup database and all the files so in case of a sudden attack, you can easily bring your own site back like nothing happened.
Should you ever wish to migrate your website elsewhere, like a new hosting company, you'd have the ability to pull this off without a hitch, and also without needing to disturb your old site until the new one was in place and ready to roll.
Can you see that folder Imagine if you go to WP-Content/plugins? If so, upload this blank Index.html file inside that folder as well so people can't see what plugins you have. Because if your version of WordPress is up to date, our website if you're using an old plugin or a plugin with a security hole, someone can use that to get access.
But realize that security is something that you really need to start thinking about. Do not just be the reactive type, take action to begin today, protecting yourself. Don't let Joe the Hacker make your life miserable and turn everything in creating come crashing down in a matter of seconds that you've worked hard.