My Wordpress site got "hacked" by an advertisement

wackoflacko

Junior Member

Aug 23, 2011

103

6

• May 15, 2017

• #1

My Woocommerce site automatically redirects customers when they add item to cart and click "checkout". the checkout page redirects to an advertisement to promote the download of some software that will make your computer faster. it changes to another ad that will make your mobile faster when you checkout with your mobile ...

how can i fix this? my developers are saying it could be because of nulled theme & plugins ...

this sucks, zero sales today because of this error i'm still trying to fix

 

surajr93

Registered Member

May 5, 2017

64

6

• May 15, 2017

• #2

Do you have back up previous?
Tell me your domain and hosting may be i can help you.

 

D

Deleted member 813988

Guest

• May 15, 2017

• #3

If you used nulled theme it could be the reason, nulled plugins - as well.
I suggest to get paid theme and check with Sucuri.

 

leon0021

Regular Member

Jr. VIP

Apr 22, 2012

402

100

• May 15, 2017

• #4

Possibly because of the malcode in your nulled script. Disable them one by one and find them out

 

surajr93

Registered Member

May 5, 2017

64

6

• May 15, 2017

• #5

If you have hosting with hostgator then scan your file and delete that file.
After that take fresh file and upload it.
I have done this and everything is fine.
Or you can delete that theme and upload fresh file.
Check some unknown file and plugin to

 

Nut-Nights

Elite Member

Executive VIP

Jr. VIP

Jun 20, 2013

11,505

8,912

• May 16, 2017

• #6

Get wordfence paid plugin and theme authenticity checker to fix such issues. Its really good.

 

surajr93

Registered Member

May 5, 2017

64

6

• May 16, 2017

• #7

Nut-Nights said:

Get wordfence paid plugin and theme authenticity checker to fix such issues. Its really good.

Click to expand...

yes

 

Tacklebox

Junior Member

May 16, 2017

105

13

• May 16, 2017

• #8

Joel

I can help you to fix this issue and then will install wordfence to keep the site secure ...there might be possibility that code has been injected since you used nulled theme which is not a good practice for sure ....people use nulled theme to save $50 ..

Let me know URL and i will check and roll back to you accordingly

Regards
Shefali