Re: I think my site has been hacked
The ms field update Paul talks about is found here:
https://wordpress.org/support/topic/recover-super-admin-access-after-username-change
I have now changed my username but I have no idea how I was hacked. I was already using login lockdown. And, through ‘login log’ I can see failed login attempts, of which there were none. So it wasn’t a brute force attempt – I’m thinking I have a loophole somewhere 
