Contributor Hack | WordPress.org

nwventures
(@nwventures)

10 years, 7 months ago

I am seeing someone (or something) adding users at the Contributor level. What’s interesting here is that I have Comments turned off; new subscribers turned off; new user notifications turned on (and I don’t receive any emails of the new users).

Has anyone else seen this?

Harry

Viewing 2 replies - 1 through 2 (of 2 total)

esmi
(@esmi)

10 years, 7 months ago

That sounds like your site may have been hacked 🙁
You need to start working your way through these resources:
http://codex.wordpress.org/FAQ_My_site_was_hacked
http://wordpress.org/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/

Anything less will probably result in the hacker walking straight back into your site again.

Additional Resources:
Hardening WordPress
http://sitecheck.sucuri.net/scanner/
http://www.unmaskparasites.com/
http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Thread Starter nwventures
(@nwventures)

10 years, 7 months ago

No luck so far.

sitecheck.sucuri.net/scanner says everything is clean. unmaskparasites.com found nothing.

I used TAC and reviewed the 2 static links in the theme and it is OK.

I am using All-in-One WordPress Security and have the site pretty locked down.

I am reviewing 14 posts that are possibles based on one of the articels mentioned (iframe, noscript, and display). So far they are only images with the display parameter showing in the code.

Anyone else seen this exploit?

Harry

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Contributor Hack’ is closed to new replies.

Tags

In: Fixing WordPress
2 replies
2 participants
Last reply from: nwventures
Last activity: 10 years, 7 months ago
Status: not resolved

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics