Hack from Constructor Theme (2 posts)

  1. beaulife
    Posted 4 years ago #

    Thank you for sharing such a good theme which I have been using it to develop about 20 or more corporate websites with Constructor Theme.

    However, I wish to highlight to you my misfortune on Good Friday today which had turned out to be Black Friday to me because I have 10 websites with Constructor Theme were hacked.

    The symptoms as follow:

    1. The wp-login username was changed to 'admin', irregardless how many different/unique usernames;
    2. The wp-login password had become clear text;
    3. Blank email address causing unable to send password-reset email.
    4. All these 10 hacked websites resided in the same account in a single shared hosting server.
    5. Based on the server log, the hacking entry was this theme. Appreciate if you can have a re-look on the design of the theme because I am not good at coding so that the loophole(s) can be blocked.

      Hope to see the next version with more security features included as soon as possible.


  2. antonshevchuk
    Theme Author

    Posted 4 years ago #

    Please contact me by email AntonShevchuk@gmail.com
    And describe follows:

    • WordPress version
    • Constructor version
    • Other plugins installed on all hacked servers
    • Server logs

Topic Closed

This topic has been closed to new replies.

About this Theme

About this Topic