WordPress.org

1. anxo69
   Member
   Posted 4 years ago #

   I was hacked this weeked and I think I know how they got in, It has something to do with the WP Photo album plugin. I have updated to a new version and I think it has stop, but hereis the link they were using:

   http://www.markarcaro.com/?page_id=5&album=S@BUN&photo=-333333/**/union/**/select/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/from/**/wp_users/**WHERE%20admin%201=%201

   It looks like that address makes a back door to my photo page.

   The first hack they changed my index page. to hacked by ulath

   The second time they wiped out my css in theme, and changed my password.

   If anybody can give me more insight I would appreciate it.

2. anxo69
   Member
   Posted 4 years ago #

   also hackers were coming from turkey from this site/address.

   http://starhacks.org/starhacks-org-group-hackeds/104343-17-site-hacked.html

3. iLobster
   Member
   Posted 4 years ago #

   THere was a security issue with WPPA, fixed with version 1.1

Topic Closed

This topic has been closed to new replies.