I was looking in Google webmaster tools today and it showed that my site had about 400 extra pages than normal. These were spam pages like /buy-cialis-online or /buy-viagra-canada so I was definitely hacked at some point, but the pages themselves don't appear to be on my Wordpress website....but they are still indexed by Google and showing mobile errors in a different section.
My site is Wordpress and the host is FatCow, and for the life of me I can't find these pages. If I type them directly in the search directory, it says the pages don't exist either. Now, I did delete all user accounts except for my own on Wordpress and I did change my password, so I think I'm safe for now.
What are the long term repercussions though? The spam pages did drop my overall rank on Alexa (which really doesn't matter) but most of my main keywords are still ranking well. So do I need to do anything else at this point? Could I be missing the content somehow? Any advice would be genuinely appreciated.