WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I used a Wordpress theme for a while that was causing high IO-load on my server. That was because there was some kind of exploits made/available for the theme: http://www.exploit-db.com/exploits/29150/ . So I deleted my theme, installed another, but "they" are keep coming back. Because the domain name is somewhere registered that it is vulnerable or something like that. What can I do to stop this? Moving it to another server isn't the solution I guess, because they're pointing to the domain name. I've already blocked IP-ranges from outside my country, they're pointing to a "forbidden" html page then, but still it are a lot of "things", so the io load stays high.

share|improve this question
Did you get the theme from that website? – Pieter Goosen Mar 18 '14 at 10:48
No. Bought it a while back, before that exploit was made public, at Themeforest. The theme is now removed, and I'm using another. But they're still trying to reach the files from the exploit. And that is causing a lot of IO-server-load. – user1867254 Mar 18 '14 at 11:13
Have you spoken to the guys at themeforest? My thinking here is that they should have had this issue with a lots a people how used that specific theme, and they might have a solution to that problem – Pieter Goosen Mar 18 '14 at 11:22
So your installation is clean, it is just that people try to access this file that isn't even there any more? – kraftner Mar 18 '14 at 11:42
That is correct @kraftner – user1867254 Mar 18 '14 at 11:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.