I’ve disabled some of the site plugins after two unauthorized WordPress admin accounts were created by unknown means some time between May 13 and May 14. I also restored a backup from a prior date to revert any potentially harmful changes.
Unfortunately, the backup somehow only included posts as recent as December 2023, but I was able to manually recreate the posts thanks to The Internet Archive Wayback Machine. I have a support ticket in with my web hosting provider to try to figure out why the database backups stopped working properly in March 2024. I may post more about that whole debacle another time. But for now, I sleep! ZzZ