[Plugin: wp-classified] WP-Classified Hidden Code (3 posts)

  1. Blackdfl
    Posted 6 years ago #

    WP-Classified has dramatically damaged my sites search engine ranking - within a few days my traffic had dropped to about a third of normal, now it's less than that. The cause after some investigation appears to be hidden text on every page of my site in a <div display:none> that linked to casino sites.

    Upon a closer look, each and every .php file across my entire site had a new php command that was to eval based64decode (like encrypting the code). I decoded the text and it pointed to the wp-classified plugin.

    The plugin was installed on my site but was not activated, use extreme caution if you have this plugin installed, even after removing the code from every .php file I could find the code seemed to continue to execute. Deleting the plugin corrected the problem. If you are running this plugin check your pages (view source). The hidden text was appearing immediately after the <body> tag.


  2. Blackdfl
    Posted 6 years ago #

    On closer look, it is not actually this plugin causing the problem. Apparently there is a hack involved that stored more encoded php inside the plugin folder. That is why deleting the plugin caused the hack to stop working.

  3. thadcafe
    Posted 6 years ago #

    Dumb question. I installed and activated the plugin. What is the short-code used to show the classifieds on a page?

    Thank you!

Topic Closed

This topic has been closed to new replies.

About this Topic