Title: (Solved – I thought this was) Hacked!!! Last modified: December 27, 2021 --- # (Solved – I thought this was) Hacked!!! * Resolved [rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) * (@rafaelvleite) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/) * Please don’t intstall it in your website! It is hacked (github doesn’t exist anymore). Every time someone will click a link in your banner the FIRST TIME using MOBILE, it will redirect to unwanted websites. Don’t install it!!! - This topic was modified 4 years, 11 months ago by [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/). - This topic was modified 4 years, 8 months ago by [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/). Viewing 15 replies - 1 through 15 (of 29 total) 1 [2](https://wordpress.org/support/topic/hacked-147/page/2/?output_format=md) [→](https://wordpress.org/support/topic/hacked-147/page/2/?output_format=md) * Plugin Author [rpetersen29](https://wordpress.org/support/users/rpetersen29/) * (@rpetersen29) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14958224) * [@rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) I’m not sure where you’re getting this from but this is not true. The GitHub repo is no longer active because I moved the code to a private repo, and even so, all code is visible from the development tab and all commits have come from me. - This reply was modified 4 years, 11 months ago by [rpetersen29](https://wordpress.org/support/users/rpetersen29/). * Thread Starter [rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) * (@rafaelvleite) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14958297) * It happened to my website. The steps to simulate this is: * Open a new browser in incognito mode Adjust screen size as mobile (or do it in a mobile) Open the webpage with simple banner with a link Click the link * please dont login as admin * A popup will open leaving to unwanted websites. Plugin is corrupted. * Thread Starter [rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) * (@rafaelvleite) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14958308) * It is cooked to happen only the first time! Then it will show no more popups. In practice, every user will be redirected to that website and the banner lost its purpose * Plugin Author [rpetersen29](https://wordpress.org/support/users/rpetersen29/) * (@rpetersen29) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14958600) * Hi [@rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) it sounds like your website got hacked and not my plugin. You can look through the code, there is nothing in the code that would support such a mechanism. * Here’s the code in question, [https://plugins.trac.wordpress.org/browser/simple-banner/trunk/simple-banner.js#L10](https://plugins.trac.wordpress.org/browser/simple-banner/trunk/simple-banner.js#L10). It simply takes the text parameter and put it in an html element. * You should look through your database and make sure no one has made unauthorized changes. * Plugin Author [rpetersen29](https://wordpress.org/support/users/rpetersen29/) * (@rpetersen29) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14958642) * All code for this plugin is open source and available to browse through the WordPress plugin website, [https://wordpress.org/plugins/simple-banner/#developers](https://wordpress.org/plugins/simple-banner/#developers). Every commit I make is directly to WordPress. I would urge you to look through source code before making false claims like this. * Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/) * (@sterndata) * Volunteer Forum Moderator * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14958698) * [@rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) * Get a fresh cup of coffee, take a deep breath and carefully follow [this guide](https://wordpress.org/support/article/faq-my-site-was-hacked/). When you’re done, you may want to implement some (if not all) of [the recommended security measures](https://wordpress.org/support/article/hardening-wordpress/). * If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple. * Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/) * (@sterndata) * Volunteer Forum Moderator * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14958702) * [@rpetersen29](https://wordpress.org/support/users/rpetersen29/) Moderators have reviewed this topic and it’s not spam. Let’s help this user clean up his site… * [@rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) if you need additional assistance cleaning your site, please see the links above and post additional info, if necessary, in a new topic not related to this plugin. * Also, this topic has been moved from “reviews” to “support”. - This reply was modified 4 years, 11 months ago by [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/). * Plugin Author [rpetersen29](https://wordpress.org/support/users/rpetersen29/) * (@rpetersen29) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14958726) * [@sterndata](https://wordpress.org/support/users/sterndata/) thanks, apologies for the wrong label. * Thread Starter [rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) * (@rafaelvleite) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14959250) * Thank you so much for the moderation Steve, I just took a deep breath 😉 Sorry for anything [@rpetersen29](https://wordpress.org/support/users/rpetersen29/) I don’t want to harm your business. But I need to warn there is someting really wrong with the plugin (and it is not the first time, since “Simple Banner” had vulnerability issues is the past and I found the many websites listing this plugin as causing websites to get hacked). I just ran a full scan with the main websites( Quttera, etc) and thankfully no malware was found. I also installed a Malware detector plugin (“Anti-Malware Security and Brute-Force Firewall”) and ran a full scan and nothing was found. I will run some other tests with the plugin in a new, fresh and clean website and I will record videos of it. I will not stop until this case is solved, because someone is getting money redirecting people to undesired websites. By the way [@rpetersen29](https://wordpress.org/support/users/rpetersen29/) please kindly let me know why you moved your code to a Private Repo. When we install this plugin and from inside wordpress click to know more about the website, it leads to a not found page. * Thread Starter [rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) * (@rafaelvleite) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14959252) * this is the url [https://github.com/rpetersen29/simple-banner](https://github.com/rpetersen29/simple-banner) * Plugin Author [rpetersen29](https://wordpress.org/support/users/rpetersen29/) * (@rpetersen29) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14959343) * Yeah that repo has been deleted, by me. - This reply was modified 4 years, 11 months ago by [rpetersen29](https://wordpress.org/support/users/rpetersen29/). * Plugin Author [rpetersen29](https://wordpress.org/support/users/rpetersen29/) * (@rpetersen29) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14959349) * That user’s issue seems to be different than yours. If you want to provide any details of your issue i will gladly try to help. However, the issue is not with this plugin, which i have described in detail above. - This reply was modified 4 years, 11 months ago by [rpetersen29](https://wordpress.org/support/users/rpetersen29/). * Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/) * (@jdembowski) * Forum Moderator and Brute Squad * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14959388) * [@rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) I archived your reply in that other topic and your reply to the link to the other topic. * Please keep support here for your problem and not cross the streams. The other moderator explained above what you need to do to delouse your site. * Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/) * (@jdembowski) * Forum Moderator and Brute Squad * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14959395) * Also [@rpetersen29](https://wordpress.org/support/users/rpetersen29/) I made this topic “Not Resolved”. Yes, you can resolve topics but doing that before the original poster’s topic is resolved is not cool. * They can unresolved their topics as well; I just saved them a click or two. * Plugin Author [rpetersen29](https://wordpress.org/support/users/rpetersen29/) * (@rpetersen29) * [4 years, 11 months ago](https://wordpress.org/support/topic/hacked-147/#post-14959399) * [@rafaelvleite](https://wordpress.org/support/users/rafaelvleite/) I deleted the Github repo because the SVN repo that is available to everyone here, [https://plugins.trac.wordpress.org/browser/simple-banner/](https://plugins.trac.wordpress.org/browser/simple-banner/), is the one i make my commits to. Code committed to the WordPress repo gets published directly. Any commits i made to the Github repo were just copied over from this one and since i didn’t keep it up to date i deleted it as it was unnecessary. Viewing 15 replies - 1 through 15 (of 29 total) 1 [2](https://wordpress.org/support/topic/hacked-147/page/2/?output_format=md) [→](https://wordpress.org/support/topic/hacked-147/page/2/?output_format=md) The topic ‘(Solved – I thought this was) Hacked!!!’ is closed to new replies. * ![](https://ps.w.org/simple-banner/assets/icon-256x256.png?rev=1198700) * [Simple Banner - Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website](https://wordpress.org/plugins/simple-banner/) * [Frequently Asked Questions](https://wordpress.org/plugins/simple-banner/#faq) * [Support Threads](https://wordpress.org/support/plugin/simple-banner/) * [Active Topics](https://wordpress.org/support/plugin/simple-banner/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/simple-banner/unresolved/) * [Reviews](https://wordpress.org/support/plugin/simple-banner/reviews/) * 29 replies * 5 participants * Last reply from: [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/) * Last activity: [4 years, 8 months ago](https://wordpress.org/support/topic/hacked-147/page/2/#post-15199137) * Status: resolved