Posted 6 months ago #
Recently I noticed that I have subscribers when that particular function is not checked in my setup.
These subscribers are making draft posts (over 200). Most of them are wordpress webpages and walmart.com.
How can this happen?
kk
Don't know what other information you may need to solve this crazy problem.
If subscribers can create posts on your site, then it's been hacked:
http://codex.wordpress.org/FAQ_My_site_was_hacked
http://wordpress.org/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/
Posted 6 months ago #
Thanks, I'll check it out.
kk
Posted 6 months ago #
Sucuri site check says I'm clean.
kk
Posted 6 months ago #
Even though sucuri says my site is clean now I keep getting a subscriber by the name of Jane Wells with a website of http://wordpress.org/news along with an unknown subscriber that puts wordpress drafts in my draft post section.
Any thoughts?
kk
There is a Jane Wells at that web site address, so I wouldn't liker to hazard a guess about that one. But, as I said previously, if subscribers can create posts on your site, then it's been hacked. That sitecheck site cannot detect everything.
Posted 6 months ago #
This is what sucuri.net picked up with a red exclamation point next to it this link: WordPress internal path: /home/content/02/7387602/html/wp-content/themes/weaver/index.php - anyone know?
It does not tell me what it means though. Everything else checks out fine.
Another subscriber is Ryan Boren, I'm assuming these must be fake names that the hacker is using to look legit. Don't know if these people care that their names are being used to hack sites.
kk
You must log in to post.
