How to fix a **“Compromised Site”** issue in Google Ads

Has anyone recently fixed a “Compromised Site” issue in Google Ads?

I’ve seen some cases where the website looks normal, but Google still flags it because of hidden redirects, suspicious scripts, tracking codes, or third-party plugins.

For those who successfully appealed it, what did you check or remove before submitting the appeal?

Would love to hear what actually worked.

I check third-party plugins first. We found an outdated plugin that was triggering suspicious behavior, and removing it fixed the issue.

Check every plugin and theme update first. Often outdated plugins or themes inject suspicious code even if the site looks normal. Remove anything unnecessary.

contact ads support and ask for the exact infected urls list, then check search console security tab and clean your public_html folder before appeal