Title: <abbr title="Not Safe For Work / Mature content">[NSFW]</abbr> Critical issues help
Last modified: October 9, 2023

---

# [NSFW] Critical issues help

 *  Resolved [freemordecai](https://wordpress.org/support/users/freemordecai/)
 * (@freemordecai)
 * [2 years, 7 months ago](https://wordpress.org/support/topic/critical-issues-help/)
 * Got a few wordfence critical issues, wondering if somoene can recommend a course
   of action. One of my customers said there was a porn pop up when they went to
   my site here: [https://mattress-deals.com](https://mattress-deals.com)
   [https://snipboard.io/h8anvI.jpg](https://snipboard.io/h8anvI.jpg)
   [https://snipboard.io/W8BqUA.jpg](https://snipboard.io/W8BqUA.jpg)[https://snipboard.io/AFZJVx.jpg](https://snipboard.io/AFZJVx.jpg)
   [https://snipboard.io/FNRUv0.jpg](https://snipboard.io/FNRUv0.jpg)Thanks in advance!
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fcritical-issues-help%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 1 replies (of 1 total)

 *  Plugin Support [wfpeter](https://wordpress.org/support/users/wfpeter/)
 * (@wfpeter)
 * [2 years, 7 months ago](https://wordpress.org/support/topic/critical-issues-help/#post-17110210)
 * Hi [@freemordecai](https://wordpress.org/support/users/freemordecai/), thanks
   for reaching out with a large amount of useful information.
 * I would firstly recommend making the “critical” severity plugin updates to ensure
   you’re not running any plugin versions with known vulnerabilities on your site
   to resolve these particular notices.
 * After this, I am slightly concerned that you may be experiencing malware rather
   than false-positives as there are a high enough quantity of files reporting different
   types of scripts, infections, and code that can be detrimental to your security.
   It’s possible that the outdated plugins with known vulnerabilities were the entry
   point, but I can’t be sure.
 * **As a rule, any time I think someone’s site has been compromised I also tell
   them to update their passwords for their hosting control panel, FTP, WordPress
   admin users, and database. Make sure to do this.**
 * It might be an idea to email a downloaded copy of any affected file(s) showing
   as high severity from your scan to **samples @ wordfence . com**. Our Threat 
   Intelligence team should be able to provide more detailed information around 
   what could have happened and let you know whether a site cleaning should be performed.
   You can get them by visiting the file path shown in your scan result via FTP 
   or the web-based file manager in your hosting control panel (whichever you use
   to manage files on your site).
 * **Please note that when attaching files, ensure that you remove any database 
   access credentials or keys/salts contained inside before sending.**
 * For your information and remove any potential delay around getting you the information
   you need, I’ll also provide our site cleaning instructions to help you out. **
   We recommend that you make a full backup of the site before making any changes**:
   [https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/](https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence)
 * Additionally you might find the WordPress Malware Removal section in [our free Learning Center](https://wordfence.com/learn/)
   helpful.
 * If you are unable to clean this on your own, there are paid services that will
   do it for you. Wordfence offers one, but there are others.
 * Thanks,
   Peter.

Viewing 1 replies (of 1 total)

The topic ‘[NSFW] Critical issues help’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

## Tags

 * [Issues](https://wordpress.org/support/topic-tag/issues/)

 * 2 replies
 * 2 participants
 * Last reply from: [wfpeter](https://wordpress.org/support/users/wfpeter/)
 * Last activity: [2 years, 7 months ago](https://wordpress.org/support/topic/critical-issues-help/#post-17110210)
 * Status: resolved