Unusual Post in My Blog

[sconda]

I discovered my ranking has been erratic of recent..

I decided to login to my WordPress today, only to discover a lot of posting from 2012, 11 of them

I went to my WordPress admin and deleted the 11 posts. But I want to know how the postings were done in order to prevent it in the future

My site was created in November 2016

 

[Wilson Grant Fisk]

How many authors are there on your site? Or do you think you may have been hacked?

 

[sconda]

How many authors are there on your site? Or do you think you may have been hacked?

Just one author. The posts are showing as the same author as mine

 

[wilfathan]

Did you check your xmlrpc?
If you don't use it, it should be turned off.

 

[Chris.Roark]

what are those blog posts about?

I mean, does it look like a piece of content that you created?

 

[sconda]

Did you check your xmlrpc?
If you don't use it, it should be turned off.

The content is in no way related to what I created. When I checked with plagiarism checker it has a lot of sources all over the internet

 

[BenSchiltz]

Do you use Admin as user to login and how hard is your password to break? How long has it been since you have been into your dashboard and made posts before discovering this issue?

 

[sconda]

The content is in no way related to what I created. When I checked with plagiarism checker it has a lot of sources all over the internet

I don't use admin but I will increase complexity of my password. I have also disabled the xmlrpc like wilfathan advised

Hopefully this will work

 

[sconda]

I don't use admin but I will increase complexity of my password. I have also disabled the xmlrpc like wilfathan advised

Hopefully this will work

This did not work as I see still saw another posting now

 

[saradanes]

Did you update your wp site to the latest wp version (4.7.2)? I have one wp site that was hacked into and changed a post, then I updated the site, changed login details and it's ok since then.
Another problem can be with your hosting.
One of the hostings I used was compromised and took time to recover. I was not patient enough when seeing the weird posts on my blogs so I just moved away.

 

[Wilson Grant Fisk]

Do you use any nulled themes or plugins? Disable them and run a scan with Wordfence
https://en-gb.wordpress.org/plugins/wordfence/
OP scan your site with these:
https://aw-snap.info/file-viewer/
https://zeltser.com/lookup-malicious-websites/
https://quttera.com/website-malware-scanner
http://www.malwarehelp.org/freeware...ebsite-security-tools-services-downloads.html
http://sitecheck.sucuri.net/
http://evuln.com/#
http://www.unmaskparasites.com/

 

[MrZod]

It does happen when you use plugin shared free. My 2 website started showing as dangerous website while opening them up. When i checked in google, my web had 1000 of page listed and indexed. I logged into wp to find out and I found 1000's of pages inside and i deleted them.

After a week, again i found new pages appearing in search result. That too it was under categories which was not even thr in my wp setup. I looked into all places to find out where those pages are located but could not find. Finally I had to delete the complete web and i abandoned the domain

Lesson: do not use plugin or theme which are shared for free

 

[sconda]

Do you use any nulled themes or plugins? Disable them and run a scan with Wordfence
https://en-gb.wordpress.org/plugins/wordfence/
OP scan your site with these:

Do you use any nulled themes or plugins? Disable them and run a scan with Wordfence
https://en-gb.wordpress.org/plugins/wordfence/
OP scan your site with these:
https://aw-snap.info/file-viewer/
https://zeltser.com/lookup-malicious-websites/

Did you update your wp site to the latest wp version (4.7.2)? I have one wp site that was hacked into and changed a post, then I updated the site, changed login details and it's ok since then.
Another problem can be with your hosting.
One of the hostings I used was compromised and took time to recover. I was not patient enough when seeing the weird posts on my blogs so I just moved away.

Thanks

 

[sconda]

It does happen when you use plugin shared free. My 2 website started showing as dangerous website while opening them up. When i checked in google, my web had 1000 of page listed and indexed. I logged into wp to find out and I found 1000's of pages inside and i deleted them.

After a week, again i found new pages appearing in search result. That too it was under categories which was not even thr in my wp setup. I looked into all places to find out where those pages are located but could not find. Finally I had to delete the complete web and i abandoned the domain

Lesson: do not use plugin or theme which are shared for free

I deleted the only nulled plugin I have on the site. Let's see how it goes

 

[bartosimpsonio]

Rename xmlrpc.php to something really hard to guess.

 

[sconda]

Update: I used the disable xmlrpc plugin on wordpress

It seems to work, because I have not seen any post in while

Thank you guys

 

[SunSearcher]

MAy be some one else is accessing your site just check all security