WordPress.org

Ready to get started?Download WordPress

Forums

Constructor
Hack from Constructor Theme (2 posts)

  1. beaulife
    Member
    Posted 2 years ago #

    Thank you for sharing such a good theme which I have been using it to develop about 20 or more corporate websites with Constructor Theme.

    However, I wish to highlight to you my misfortune on Good Friday today which had turned out to be Black Friday to me because I have 10 websites with Constructor Theme were hacked.

    The symptoms as follow:

    1. The wp-login username was changed to 'admin', irregardless how many different/unique usernames;
    2. The wp-login password had become clear text;
    3. Blank email address causing unable to send password-reset email.
    4. All these 10 hacked websites resided in the same account in a single shared hosting server.
    5. Based on the server log, the hacking entry was this theme. Appreciate if you can have a re-look on the design of the theme because I am not good at coding so that the loophole(s) can be blocked.

      Hope to see the next version with more security features included as soon as possible.

    http://wordpress.org/extend/themes/constructor/

  2. AntonShevchuk
    Member
    Theme Author

    Posted 2 years ago #

    Hi,
    Please contact me by email AntonShevchuk@gmail.com
    And describe follows:

    • WordPress version
    • Constructor version
    • Other plugins installed on all hacked servers
    • Server logs

Topic Closed

This topic has been closed to new replies.

About this Theme

About this Topic