Is My Site Hacked? Wordpress

T

tmajestic

Newbie

Apr 16, 2012

44

8

• Aug 4, 2014

• #1

Ok so every few days I get some random new post that pops up in my drafts...

They are all Untitled_01 Untitled_02 etc...

And each post has no information except a tag that is like...

180, 5'11, Male

or similar tags with just like a weight, height, and male in the tag...

WTF is going on? Am I hacked? And what is the point of this hack if it is a hack...how could someone benefit from this?

 

G

givensia

Regular Member

Apr 11, 2014

396

122

• Aug 4, 2014

• #2

If I had to guess that looks a lot like malware to me.

 

IAlwaysWin

Junior Member

Aug 3, 2014

167

43

• Aug 4, 2014

• #3

That looks like a hacked site to me. I would install a few security/virus scan plugins and figure it out.

 

S

Spyware293

Registered Member

Dec 31, 2013

51

3

• Aug 4, 2014

• #4

lol i though you are seoways.

anyway try to remove all plugins and check if it's still happen

 

maecenas23

Senior Member

Oct 12, 2010

1,075

1,010

• Aug 4, 2014

• #5

Contact the hosting company and ask them for help. Once everything is removed, install Ithemes Better Security and learn how to setup it for maximum security.

 

techblog

Elite Member

Jr. VIP

Feb 12, 2013

1,648

436

• Aug 4, 2014

• #6

was your wordpress website theme downloaded from a script sharing nulled site?

if yes, god bless you!

 

C

ckPPP

Newbie

Apr 10, 2011

18

6

• Aug 4, 2014

• #7

download all files from ftp and check all files for some base64 code. If u didnt find any vulnierable code, look in your base. they can add posts directly in mysql by using info from wp-config file.

 

aka sam

Elite Member

Jr. VIP

Sep 15, 2011

6,011

1,103

• Aug 4, 2014

• #8

yes seems like a hacked site, you can try removing all the plugins and see if it works. Some times these fancy plugins create havoc to Wordpress..

 

C

Cookie38

Newbie

Aug 1, 2014

1

0

• Aug 4, 2014

• #9

i think your wp-config isnt secure ! or try to remove all plugins !

 

ID Internet Marketer

Senior Member

Jan 22, 2013

939

1,444

• Aug 4, 2014

• #10

probably hacked. first of, try to disable all your plugin and change theme (if it's nulled). if still going, then install security plugin or contact the hosting.

 

R

rakesh21

Registered Member

Aug 2, 2014

50

4

• Aug 5, 2014

• #11

to avoid this on wordpress install BulletProof Security, they hack your site using wordpress theme

 

lord1027

Elite Member

Sep 20, 2013

3,218

2,342

• Aug 5, 2014

• #12

WP is full of vulnerabilites, my question is: Where did you get the themes/plugins? Are they "nulled" ?

 

JournoNick

Power Member

Feb 11, 2014

667

333

• Aug 5, 2014

• #13

I wonder if my site hacked. I have this black screen on my index with big white text saying "You were hacked" and some random song play in the background.

 

b0r15

Newbie

Aug 1, 2013

26

8

• Aug 5, 2014

• #14

lord1027 said:

WP is full of vulnerabilites, my question is: Where did you get the themes/plugins? Are they "nulled" ?

Click to expand...

WP is safe, but you should be careful with what themes & plugins you are using. It's recommended to use themes/plugins only from trustworth sites like WP org and the popular theme stores like ThemeForest, ...

 

D

DaringHost

Registered Member

Mar 19, 2014

66

15

• Aug 5, 2014

• #15

b0r15 said:

WP is safe, but you should be careful with what themes & plugins you are using. It's recommended to use themes/plugins only from trustworth sites like WP org and the popular theme stores like ThemeForest, ...

Click to expand...

+1 And also keep all themes and plugins up to date. You'd be surprised how many users do not keep their software up to date.

 

G

Geeza

Newbie

Jan 21, 2013

9

3

• Aug 5, 2014

• #16

Sounds like you've got a bit of rogue code inside. If you've got any dodgy plugins then it's very likely... same goes for themes... hard without having a look though. Have a look at the source for your themes and plugins and check to see for any encoded / encrypted scripts... typical for php is base64("string").

I don't mind having a quick look for you though... I love challenges and would be quite interesting to see how they're doing it ha!

 

lord1027

Elite Member

Sep 20, 2013

3,218

2,342

• Aug 5, 2014

• #17

b0r15 said:

WP is safe, but you should be careful with what themes & plugins you are using. It's recommended to use themes/plugins only from trustworth sites like WP org and the popular theme stores like ThemeForest, ...

Click to expand...

That's what I meant when I said vulnerabilities, Themes and Plugins, not WP itself. It's so easy to insert a small code in a plugin/theme and share it ont he web.