omg, my website is hacked, why...?

[tenam]

Google tells "This site may be hacked." my website suffers from “URL Injection” hacked type after research.
What I used are all bought from official website like the theme, plugin....
I found that my webiste is index by google with content not created by me.
something like this: mydomain.com/g12345 where the title is things like "nude,sex..etc..." I never do this....how to fix this issue?
many thanks..

 

[Zwielicht]

Where you purchased your theme and plugins is a red herring in this case. Your site can still be hacked through brute forcing, zero-day vulnerabilities, outdated plugins, etc.

There's no one-size-fits-all answer to this. If your site's fairly small, the easiest thing to do is to rebuild the entire site rather than spend time trying to figure out how the hacker got in, what backdoors they've left, where the malicious code is, etc. Download any images you have, save the text in a notepad, and wipe the site from the server. Re-download a fresh copy of the themes and plugins you used, and set everything back up. Do this during the time that your site receives the least activity in order to avoid interrupting as many users as you can. Additionally, update your site's login credentials and don't use something simple like "admin".

Also, make sure your site is actually hacked and it's not a false alarm. Sometimes, when a site on the same server as your site is hacked, Google will display a warning as if it was your site that was breached. I recall this being the case for one of my clients last year who got a hacked site warning and then a "social engineering content" warning.

 

[kboxer7]

Do you have a backup of the site "pre-hack" ? Restoring to that backup won't fix the backdoor/vulnerability but it might get you back to normal for the moment. Update all plugins/themes/CMS if applicable.

Then hire an expert to fix any security flaws.

 

[Gogol]

Out of curiosity, can I ask you what themes & plugins you used? Buying a theme/plugin doesn't make it secure atall. It might still have undisclosed zero day vulnerabilities as @Zwielicht mentioned.

Also, do you have your site visitor log? What do you see there?

 

[boostpro]

whats your site url ?

 

[RonyXbox1]

you should contact your hosting service immediately

 

[kboxer7]

Out of curiosity, can I ask you what themes & plugins you used? Buying a theme/plugin doesn't make it secure atall. It might still have undisclosed zero day vulnerabilities as @Zwielicht mentioned.

Also, do you have your site visitor log? What do you see there?

Somewhere around 53% of ALL plugins for Wordpress are "out of date" and thus likely insecure. And those are just the ones on the official repository.

 

[darulez]

some time ago, some site on some cheap hoster got hacked.
hoster blaimed it on me.. (use antivir and shit)

yeah right. it was a STATIC HTML site..

> hoster kicked out.

a lot of time, it is also the cheap hoster, that causes that trouble. cause THEY dont keep their systems clean!

 

[CyberHour]

some time ago, some site on some cheap hoster got hacked.
hoster blaimed it on me.. (use antivir and shit)

yeah right. it was a STATIC HTML site..

> hoster kicked out.

a lot of time, it is also the cheap hoster, that causes that trouble. cause THEY dont keep their systems clean!

Confirmed

 

[Billy Batts]

WP is the most targeted platform on the internet.

If you have a log you would be surprised how many daily attacks you will have from utter noobs that will fill in " admin" as login name, which on my sites you will get banned directly, to advanced hackers.

So far no1 has even come close of getting in but it annoying for sure.

I run Ithemes security and miniOrange 2fa

 

[xjapan]

are you acidentally buying an expired domain and when you putting up your content that are totally different from the previous then google will detect the website may be hacked, the word "may be" is just a warning when google noticed differences in their indexing.

 

[Gogol]

some time ago, some site on some cheap hoster got hacked.
hoster blaimed it on me.. (use antivir and shit)

yeah right. it was a STATIC HTML site..

> hoster kicked out.

a lot of time, it is also the cheap hoster, that causes that trouble. cause THEY dont keep their systems clean!

most probably due to the poor ownership permission for the file system. Whenever a client provides me a shared hosting package, I try CDing into the parent folder to see if it is accessible. If it is accessible, it is hackable (given, you have write permission). Try that trick out next time and it will reduce the chance of being sorry later..

 

[lendir]

many possibility, atleast viewing your server log will get you somewhere if not everybody will make stupid assumption for example ftp password,file permissions etc, those kinda hack work well perhaps in year 1999... as now day hack is more complicated..in my experience 80% wp got hacked is because poorly coded themes or plugin (only stupid admin set password with "qwerty" or "admin123456")..even if you set extra difficult password or setup extra secure file permission but if hacker able to launch shell command then is over

 

[tenam]

Thanks all!!!!!!!!!!
My issue is solved in the following ways:
1) backup all content
2) ask the web host to delete the site and re-install
3) import content
Now the alert is gone...
The possible cause might be the "Jetpack premium plugin" of which further research told me that it has the vulnerability..... without installation of it everything seems fine!!!
Once again, thanks all for your input!!!!!

 

[mickyfu]

Thanks all!!!!!!!!!!
My issue is solved in the following ways:
1) backup all content
2) ask the web host to delete the site and re-install
3) import content
Now the alert is gone...
The possible cause might be the "Jetpack premium plugin" of which further research told me that it has the vulnerability..... without installation of it everything seems fine!!!
Once again, thanks all for your input!!!!!

Maybe I'm misunderstanding. You backed up a hacked site and reinstalled a hacked site? And now you think it's fine?

 

[mickyfu]

Contact adrianlamohacks@gmail. com to help get ur info back and secure ur account

Yeah sure Adrian.

 

[Mark Anthony]

Google tells "This site may be hacked." my website suffers from “URL Injection” hacked type after research.
What I used are all bought from official website like the theme, plugin....
I found that my webiste is index by google with content not created by me.
something like this: mydomain.com/g12345 where the title is things like "nude,sex..etc..." I never do this....how to fix this issue?
many thanks..

Contact the official website where you bought the plug in they can help you of what is happening.

 

[mhgod]

WP is the most targeted platform on the internet.

If you have a log you would be surprised how many daily attacks you will have from utter noobs that will fill in " admin" as login name, which on my sites you will get banned directly, to advanced hackers.

So far no1 has even come close of getting in but it annoying for sure.

I run Ithemes security and miniOrange 2fa

So your security is all on login page, there were and are plenty of wordpress 0days that can easily give access to attacker without having to login to your dashboard.
I'm just saying, that you can easily be owned even though you won't notice.

 

[Billy Batts]

So your security is all on login page, there were and are plenty of wordpress 0days that can easily give access to attacker without having to login to your dashboard.
I'm just saying, that you can easily be owned even though you won't notice.

Nope my security is within WP And server-side.
The login I changed to my IP so no more tries there .