WordPress.org

1. ceffyl
   Member
   Posted 4 years ago #

   Greetings.

   I searched and didn't find any related information on this. Maybe someone can have some suggestions.

   I am using WP 2.1.2 hosted with a company I've used for years. This past weekend, a friend notified me that my links page (http://ceffyl.net/wordpress/links/) was full of links for Cialis and other spam.

   I used to have problems with comment spam, but have not had trouble with that for quite some time thanks to Spam Karma.

   I have tried updating to 2.2, but ended up reverting to 2.1.2 because of errors I was unable to resolve. I may try upgrading to 2.3, if this would help the problem. However, some of the plugins I use (Extended Live Archive and others) are not compatible, so I would rather wait.

   I'm using the latest Misty Look theme by Sadish, in case that helps.

   What I have tried:

   * I went through my site and found two files with persmissions set higher than 644 (excluding folders): xmlprc.php and a file for Aniga gallery. I modified the persmission to be 644 instead of 755 (not sure if this was the correct thing to do).

   * Setting the spam settings on Spam Karma to the highest levels.

   * Removing any bogus user accounts.

   * Changing all user passwords.

   Any suggestions would be greatly appreciated. This has me concerned.

2. ceffyl
   Member
   Posted 4 years ago #

   Is there a vulnerability in 2.1.2 that is causing this problem? (i.e., is the only resolution to upgrade?)

3. moshu
   Member
   Posted 4 years ago #

   This seems to be something new:
   http://wordpress.org/support/topic/138934?replies=4

   Let's hope the devs are working hard on it :)

4. ceffyl
   Member
   Posted 4 years ago #

   Thank you for the link. The steps described on that post are precisely what I did as well. In fact, the new users appeared on my blog on Saturday. I require people to register to create comments, so while it's unusual I wasn't too alarmed to see a new user. However, the email addresses and names appeared to be bogus, so I removed the users on Monday evening after returning from travel.

   Like eweibust, the spam on the blogroll continued to appear after removing the bogus users. New spam has continued to appear no matter what steps I've taken.

Topic Closed

This topic has been closed to new replies.