Here is a copy paste what i got today from my host: Code: I have noticed that spam emails were originated the through the script /wp-admin/profile.php. Please delete the offended files from your account. Also, you can only send e-mails to those who have requested it. Your mailing list must be an opt-in list, you also need an opt-out option for any removal requests, and you will need to honor those requests in a timely fashion. If you have any further questions, please update the Support Console. What is here wrong with my wp? How to solve this? I have about 15 wp sites hosted on this provider and they asking me now to delete some key files from my wp.