My site http://factshelf.com/ is powered by wordpress. Recently I got warning from google about malwares in my site with respective links. It's like http://factshelf.com/index.php/this/ .
The problem is that whatever typed after index.php/ it shows up the homepage, instead of the page not found error message. ie..
This is a security breach and some stupid hacker used this to inject malware codes into my site at some invalid targets like index.php/this/cars, index.php/this/health, etc...
Please help me to resolve this. How to display 404 error pages for invalid/unreachable/broken links in wordpress?