Plugin Hacked

wood1e
(@wood1e)

9 years, 10 months ago

Hi,

My clients site appears to have been hacked – Comment injected- into the Admin menu.

I am pretty sure I was using the latest version of AIO, the developer un-installed it before I could check to see what the actual problem is.

Is there any known issues with AIO on previous versions of WP?
Is there any know issues with WP generally speaking? I can’t believe we have been unique in this hack 🙂

Any pointers as developer wants me to install a different SEO package, and that is something I don’t want and something that is a pain in the arse!!

https://wordpress.org/plugins/all-in-one-seo-pack/

Viewing 5 replies - 1 through 5 (of 5 total)

Plugin Support Steve M
(@wpsmort)

9 years, 10 months ago

Hi wood1e,

If you were running the latest version of All in One SEO Pack then there are no known issues. There are many ways an attacker could have accessed your site, the only way you can find out which vector was used is to check your server logs.

Thread Starter wood1e
(@wood1e)

9 years, 10 months ago

Hi,

Thanks for that, my understanding was that AIO was the reason for access.

esmi
(@esmi)

9 years, 10 months ago

The fact that your site was hacked does not implicate this plugin as the vector for the attack. It merely implies that it, too, was a victim of the hacker on your site. You now need to start working your way through these resources:
http://codex.wordpress.org/FAQ_My_site_was_hacked
http://wordpress.org/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/

Anything less will probably result in the hacker walking straight back into your site again.

Additional Resources:
Hardening WordPress
http://sitecheck.sucuri.net/scanner/
http://www.unmaskparasites.com/
http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Thread Starter wood1e
(@wood1e)

9 years, 10 months ago

Hi,

Many thanks, although the hack is removed when AIO is disabled.

Anyway, no worries what ever the answer I have to re-write all the META descriptions and Page titles 🙂

Thanks for your help

esmi
(@esmi)

9 years, 10 months ago

the hack is removed when AIO is disabled.

That is nowhere near enough, Please read the pages at the links I posted above.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Plugin Hacked’ is closed to new replies.