my wordpress site got hacked
- Thread starter ceniicr7
- Start date
- Apr 25, 2014
- 6,918
- 12,423
Do you have an FTP connection available? If so, use FileZilla and look at all the files that have been updated recently that you haven't touched, and delete them.
Then, change your listen port. Normally, your SSH is on port 22, I believe. There is more, such as checking your PHP & Apache settings. But this should get you started.
Then, change your listen port. Normally, your SSH is on port 22, I believe. There is more, such as checking your PHP & Apache settings. But this should get you started.
loedown
Elite Member
- Jun 29, 2009
- 1,863
- 547
This happens all the time due to outdated plugins and wordpress itself.
Check this FAQ out: https://codex.wordpress.org/FAQ_My_site_was_hacked
Check this FAQ out: https://codex.wordpress.org/FAQ_My_site_was_hacked
yes currently i have access and to root with whm but i want to check ip that have been log in on wordpress and what are they doing spam and how they hacked me
- Apr 25, 2014
- 6,918
- 12,423
You can check that in the backend of WHM or the back end of wordpress for IPs that have accessed your server/site. Follow the link posted above for further troubleshooting.
Eternal1912
Power Member
- Dec 6, 2014
- 687
- 288
This can happen if you have used a nulled wordpress theme from BHW, for example.
D
Deleted member 657006
Guest
Scrape the lot start agin ...
this time set hard to guess passwords......
use the Microsoft password rule.
this time set hard to guess passwords......
use the Microsoft password rule.
WPRipper
Elite Member
- Mar 24, 2010
- 1,615
- 1,929
You have ur answer.
Cherry
Supreme Member
- Mar 23, 2014
- 1,338
- 357
So, it isn't advisable to use those Wordpress themes being given away for free here on BHW?
Capo Dei Capi
BANNED
- Oct 23, 2014
- 752
- 7,253
How do we know if a nulled theme can be hacked?
isurfthenet
Registered Member
- Mar 15, 2010
- 87
- 22
I had a similar experience some time back and I was able to resolve many of the issues using the plugin below. You can set it to scan your whole system and even compare to original wordpress files. As many mentioned on this thread, you should check for any recent changes via FTP as well, however, this plugin will find many of those and let you remove/resolve.
https://wordpress.org/plugins/wordfence/
https://wordpress.org/plugins/wordfence/
In a word; NO
There are some devious scum on all forums, who are happy to appear to be the good guys by sharing nulled themes / plugins etc but have actually supplied you with a free of charge Trojan or backdoor exploit.
These people are the lowest of the low, so it is best to buy legit themes and plug ins.
- Apr 25, 2014
- 6,918
- 12,423
A virus total and/or other users posting about it. It's easy to find an exploit or a file that shouldn't be there or even a line of code that shouldn't be there.