My Site Was Compromised in 48 Hours. I Thought It Was a CSS Bug.

I opened my laptop convinced I had a CSS bug. Shop links on my WooCommerce site were resolving to empty search URLs instead of product pages. Classic front-end problem a broken template path, probably something I had changed the night before. I debugged my own code for a while before I thought to check the user list. There was an admin account on the site that I had not created. This was a dummy store a throwaway project I had spun up to test a build, with no real customers and nothing of value on it. That detail turns out to matter, and not in the way I assumed.