3
votes
Accepted
My Wordpress website was hacked
It's good that you've regained access to your website, but without any further action, you'll get hacked again. These are steps to take, in order to clean, and secure your site:
do not panic ( very ...
- 3,394
3
votes
Why my wordpress blog files are getting changed?
It's really hard to give you a 100% solid answer, because there is not much info in your question, but... Let me do some educated guesses...
The files that are mentioned in your question are very ...
- 25.5k
2
votes
My Wordpress website was hacked
This occurs by using NULLED themes and plugins
You have to know that everything nulled is contaminated by malicious code.
When Nulled is installed, the code wakes up at a certain moment, goes ...
- 21
1
vote
unable to remove malware from wp website
Over the years, I have developed a process/procedure to recover a hacked site. While backups are good, it's not always clear that a backup is 'clean' and not hacked.
My process includes reinstalling ...
- 7,106
1
vote
UpdraftPlus installed malware - scared to download or update plugins now!
It can be time-consuming to 'clean' a WP site, but it can be done with dogged determination. You'll need to reinstall WP/plugins/themes, change hosting and FTP and database credentials, look for rouge ...
- 7,106
1
vote
UpdraftPlus installed malware - scared to download or update plugins now!
You should be able to back up your site through your hosting control panel. This is a better option than adding bloat to your WP install to duplicate functionality you already have elsewhere.
- 2,211
1
vote
Wordpress filter that hook after each action/filter hook
Check also if it was added by JavaScript. To list all the functions hooked wp_footer, this might help:
global $wp_filter;
var_dump( $wp_filter['wp_footer'] );
- 111
1
vote
Antivirus detects Script:SNH-gen Trj in Elementor files
Here's the Virustotal report (including Avast) for the same file from Elementor 3.22.3 (the current version at time of writing), which comes up completely clean. You could use a diff tool to compare ...
- 2,211
1
vote
whole website redirected to another page
As mentioned in the comments, your site is probably hacked. I'd suspect the htaccess file first, and then maybe hacked index.php files.
Cleaning up a site is difficult and time-consuming, but can be ...
- 7,106
1
vote
src="https://dns.firstblackphase.com/scripts/start.js"
Looks like your site has been compromised (or possibly your computer if its not just happening on your site?) - can you access the admin area? If so I would recommend getting a plugin such as ...
- 76
1
vote
Accepted
malware undetectable by multiple scans
There are many ways to infect a site - and many ways to hide that infection from the 'popular' security plugins.
One way to detect malicious code is via a file-hash-compare function. You may need to ...
- 7,106
1
vote
Decoded malware code
The malware stores an array of PHP fragments to execute at the bottom of its own file, delimited and encoded using the MD5 hash of the filename. It has a specific GUID to control it; on start up it ...
- 4,392
1
vote
Removing Malware Appended to Each Post
A better approach to cleaning Wordpress posts is to delete all script tags along with their contents. I happen to know there should be no scripts inside my post content so this is safe for me. Make ...
- 138
1
vote
Removing Malware Appended to Each Post
The answer my friend, was blowing in the regex of str_repl() - using the opening and closing tags to excise the malware script from post_content
First I find a few specific posts in the database with ...
- 138
1
vote
Removing Malware Appended to Each Post
Is the malware in each post in the database? If so, something is inserting it, so you need to fix that first. Lots of googles/bings/ducks on how to remove malware from a WP site. (I have my own ...
- 7,106
1
vote
Accepted
Suspicious google tag manager
When I disable Content Visibility for Divi Builder then the tag goes away. Seems suspicious... maybe they got hacked or maybe they are bad cookies. Will try to move this to the proper reporting ...
- 141
1
vote
Malware in old website - how to migrate?
There is more to do to clean up a site than export/import posts data. The malware can be anywhere. And it could have gotten into your site via many paths.
Before you export/import posts, you need to ...
- 7,106
1
vote
Inject added to title
I would diagnose/fix as if there was a hack of your system. Lots of references in the googles about that.
But my technique is to change credentials on everything (hosting, wp admin users, database, ...
- 7,106
Only top scored, non community-wiki answers of a minimum length are eligible