WordPress Website Hack: How a Self-Recreating Admin Account and a Fake Cloudflare Popup Compromised Our Site