WordPress.org

1. bradschl
   Member
   Posted 1 year ago #

   In the past week anytime a new post goes up, it eventually gets edited, but not by me obviously.

   This code is inserted into the post:

   <font style="overflow: hidden; width: 0px; position: absolute; height: 0px"><!--4848--><a href="http://www.jtosh.com/temp/hqc.php?blowjob.htm">hardcore blow job</a>

   followed by probably a hundred different links, though all starting with "http://www.jtosh.com/temp/hqc.php?". (the link is different on different posts, but the format is the same.)

   The links do not show up on the page at all (I'm assuming it's the overflow: hidden; tag), however if someone copys and pastes the text it shows up.

   Also, when a post is edited like this the comments are disabled for that post.

   What security measures should I take to prevent this from happening?

2. Otto42
   Moderator
   Posted 1 year ago #

   Well, first, upgrade to the latest version. If you're running 2.1.2 like you say, then you're vulnerable. Upgrade to 2.3.3 or 2.5.

3. dreamsign
   Member
   Posted 1 year ago #

   i've updated to 2.5 and am having the same exact problem.

4. whooami
   Member
   Posted 1 year ago #

   dreamsign,

   Upgraded from what?

   You DO realize that there are exploits available for prior versions that allow your password to be compromised?

   YOU NEED TO CHANGE YOUR PASSWORD. That ought to be the second thing people are told, and the first thing people do after upgrading.

5. Sushubh
   Member
   Posted 1 year ago #

   change your password and perhaps use htaccess based protection for wp-admin folder.

Topic Closed

This topic has been closed to new replies.