Plugin that doesn’t exist is breaking my WordPress

  • Resolved FTStore

    (@ftstore)


    1 week, 1 day ago

    I have been receiving a site experiencing technical issue email from my WordPress site 3 times in the last week – 10 days and I cannot figure out what is going on. It is referencing a plugin that not only have not have installed but doesn’t exist anywhere.

    In this case, WordPress caught an error with one of your plugins, Knee receiver meta.

    First, visit your website and check for any visible issues. Next, visit the page where the error was caught and check for any visible issues.

    The website itself is still up and running but it appears that this error deactivates my Simple CAPTCHA with Cloudflare Turnstile plugin that runs on our checkout page to prevent fake order attacks. The first time this happened we were hit with hundreds of fake orders. We have taken actions to block the main IP addresses responsible for the attacks, but being exposed by having this plugin deactivate is a real problem.

    So I need to figure out what this “Knee receiver meta” is and how to remove it from my site. Any help you can provide would be really appreciated.

    Chip

    [ redundant link deleted ]

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator t-p

    (@t-p)

    1 week, 1 day ago

    plugins, Knee receiver meta

    wordpress.org plugin depository has no plugin with this name “Knee receiver meta“.
    https://wordpress.org/plugins/search/Knee+receiver+meta/

    Thread Starter FTStore

    (@ftstore)

    1 week, 1 day ago

    I am aware that there is no plugin with this name, as I wrote in the title of this thread. Nevertheless, that is what the WordPress Technical email I am receiving is saying the plugin is that is breaking my website. How do I deal with this issue?

    Moderator threadi

    (@threadi)

    1 week, 1 day ago

    If you see an email like this, you should contact the support team for the mentioned plugin. Since I can’t find the plugin anywhere either, you will need to check where you got it from to find the developer and their support contact information.

    If you can’t find this information at all and don’t know what the plugin is for, you can simply delete it. If you can’t access the backend right now, you can delete it via FTP. Log in via FTP, locate the plugin under /wp-content/plugins/, and delete its directory there. Your hosting provider’s support team can tell you how to connect via FTP.

    Of course, that’s a very strange name for a plugin. I’d also suspect that your website might have been hacked. I’d therefore strongly recommend that you look into this as well. A security plugin should be able to alert you to this. You can find examples of security plugins here: https://wordpress.org/plugins/tags/security/

    Thread Starter FTStore

    (@ftstore)

    1 week, 1 day ago

    threadi –

    We have been attacked by a number of bots and DNS attacks over the last month. I think this was code injected into our website by one of these attacks. I have deleted the php file and folder in question, per your suggestion. I have anti-spam and security software running on the website, but it did not see this issue so I was uncertain how to proceed. Thank you for your input!

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.