About web sites before and after a security breach. If you need this tag your question is probably off topic.

learn more… | top users | synonyms

1
vote
1answer
238 views

Security issues with WP sites

I have just had to deal with a few of my WordPress websites being hacked. First time put an index.html file in the cpanel of each site and replenished my admin user. Once I felt I cleaned this up, it'...
0
votes
1answer
73 views

Hacked site using transient API?

I have got a website to "cleanup" which has almost 10k replicated files in the public_html folder and almost all PHP files contains code $z=get_option("...
0
votes
1answer
99 views

Manually Disable Basic Auth from hacked wordpress database

A wordpress website was hacked. i setup a new server and new db server. when we try to visit the admin, we get a http basic auth prompt. i need to know what to look for in the database to disable this ...
-3
votes
1answer
92 views

Does anyone know what the wp_snp_stats table is? Maybe I was hacked?

Nothing is pulling up in Google. I've got a good handle on all my plugins that create custom tables. If you're familiar with this table, please let me know. Or else I have a long road ahead. Thx
1
vote
0answers
57 views

Spam users registers even when registration is disabled

I'm getting a lot of spam users registering on my site, even though I have disabled All users can register in the control panel and comments is disabled on all posts. Are anyone else experiencing ...
0
votes
0answers
19 views

Can compromised theme files lead to WordPress core files being modified?

I was recently given a website that had been hacked before I took over maintenance for it. There was a script injected to the top of every core WordPress and theme PHP file. The first step was to ...
0
votes
0answers
16 views

A SPAM URL is returning a 200 server response rather than a 404, how do I fix this?

I have completely rebuilt my hacked website from scratch; removed databases and files. After the relaunch, Google is rejecting my reconsideration request citing hacked content. It seems that one of ...
0
votes
0answers
152 views

Bruteforce attack from 127.0.0.1?

I've got a very strange problem. Actually my server is being attacked by a brute force on wp-login.php. But when I look into the access log file I see that it's from 127.0.0.1... www.*.fr:80 127.0.0....
0
votes
0answers
58 views

How do I restore my WordPress that has been hacked?

The website was hacked a week and a half ago. I removed files that were added and removed core WP files that I knew I could replace just to move along the process. Now, I am left with the wp-content ...
0
votes
0answers
62 views

Wordpress installer attack

I'm facing a repeated attack on my wordpress. The bots are attempting to force wordpress into installation mode, despite 503'ing requests for install globally and having heavily locked down security ...
-3
votes
0answers
13 views

Hack and malware files issue

I am bearing a issue with my website This website hacked after restoring the backup again and again and also show malware files woringing ocasionally