Malware alert: user photo used to hack my site

  • sgatz

    (@sgatz)


    10 years, 5 months ago

    I hate writing a post like this but the yesterday our site was hacked, a bunch of malicious code was placed on the server and our wordpress install was deleted. They also installed a back door to let themselves in. 🙁

    Sucuri determined that it was a user photo upload that was the cause. If either the plugin creator or someone else can update this plugin, I’d love to re-enable it!

    http://wordpress.org/plugins/user-photo/

Viewing 1 replies (of 1 total)
  • yourmedia

    (@yourmedia)

    10 years, 5 months ago

    thanks sgatz!! am also using this plugin and disabled it now after reading this. did you find an alternative to “user photo”? i am trying it with “wp biographia”, but am having problems with displaying profile pictures there.

    regards

Viewing 1 replies (of 1 total)
  • The topic ‘Malware alert: user photo used to hack my site’ is closed to new replies.