Support » Fixing WordPress » Malware(?) is changing my site’s URL

  • Something is changing my URL time after time…
    Also a script is added to my posts: deleted

    What could be causing it? I’m running these plugins:

    ACF User Role Field Setting
    admin css mu
    advanced access manager
    advanced custom fields
    beaver builder
    buddypress
    BuddyPress Admin Only Profile Fields
    Custom Post Type UI
    Duplicate Page
    Frontend Reset Password
    GS Envato Portfolio Lite
    GS Posts Grid Lite
    Import users from CSV with meta
    Jetpack by WordPress.com
    Kadence Toolkit
    Loco Translate
    MalCare WordPress Security, Firewall & Malware Scanner
    Members
    My Custom Functions
    Peter’s Login Redirect
    Post Types Order
    Profile Builder – Custom CSS Classes on fields
    Profile Builder – Field Visibility Add-On
    Profile Builder – GDPR Communication Preferences
    Profile Builder – MailChimp Add-On
    Profile Builder – Multi-Step Forms Add-On
    Profile Builder – Social Connect Add-On
    Profile Builder – WooCommerce Sync Add-on
    Profile Builder Pro
    SB Welcome Email Editor
    Simple Custom CSS and JS
    Testimonials Slider and Showcase
    The Events Calendar
    The Events Calendar Shortcode & Block PRO
    TranslatePress – Multilingual
    User Menus
    User Meta Lite
    User Role Editor
    Visual Portfolio
    Woocommerce
    Woocommerce Services
    WP Last Login
    WP Smart Export
    WP Statistics

    • This topic was modified 2 months, 1 week ago by boodschap.
    • This topic was modified 2 months, 1 week ago by Jan Dembowski.

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • The best way to figure out what is changing the URLs is to do some testing using health check plugin https://wordpress.org/plugins/health-check/

    This will help you rule out plugins. If you do the testing and are able to rule out all plugins then it is likely your theme’s code has been compromised.

    Hope this helps. Once you find out what is causing the links to change and find a fix please tag the thread as resolved.

    Moderator Steve Stern

    (@sterndata)

    Support Team Volunteer

    Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

    Didn’t yet found what’s causing it yet. Still trying to determinate…

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.