My wordpress site hacked

za3ter

za3ter

Newbie
Joined
Jun 21, 2020
Messages
35
Reaction score
19
Hello,
Yesterday my wordpress website hacked i think someone use an exploit in the old version of "Autoptimize plugin" and hacked my website and he upload many file and plugins to my website and he male an redirect to another website i think an cpa offer.
Guys how to make my website safe and how i can make it mor strong from hackers.
Thank You!
 
Advertise on BHW
First question: do you have a recent backup of your website? If so, get it back. That's the easiest way to get away from infected files

Next question: are you using a nulled theme?

If not, you are fine.

Your next step should be to update your plugins, themes and WP core frequently - meaning whenever you get notification that there is a new WP version you should update it ASAP.

Edit:

Forgot to mention changing your wp-login.php URL, installing a limit logins attempt plugin, and maybe wordfence.
 
speak to your hosting provider. Once, I had the same issue, but the site was not worth the cost for recovery, so I ditched it. Cant remember the cost, probably around £50. But, if your site is worth it, you will pay, if not, you wont,
 
Hello !

Use this plugin : wordfence

Wordfence is a security plugin for web sites that use WordPress. It provides various features and configuration options for site owners to protect their sites from intrusion.

+Install all new Wordpress updates when proposed.
And of course have a back up in case something wrong happen
 
thegoldeneye said:
First question: do you have a recent backup of your website? If so, get it back. That's the easiest way to get away from infected files

Next question: are you using a nulled theme?

If not, you are fine.

Your next step should be to update your plugins, themes and WP core frequently - meaning whenever you get notification that there is a new WP version you should update it ASAP.

Edit:

Forgot to mention changing your wp-login.php URL, installing a limit logins attempt plugin, and maybe wordfence.
Click to expand...
I don't have a buckup :/ :/ . No the theme not nulled. I delete the website and i instal it again.
 
Do you use wordfence?
za3ter said:
I just install the plugin on my website after what happen :/
Click to expand...
I think there was a breach in the file manager of wordpress or something like that recently I advice you to use Sucuri if you have 10$ to spare each month, I use it and they are truly amazing
 
Stuffedegg said:
speak to your hosting provider. Once, I had the same issue, but the site was not worth the cost for recovery, so I ditched it. Cant remember the cost, probably around £50. But, if your site is worth it, you will pay, if not, you wont,
Click to expand...
The website get 4k to 10k user per day i delete everything and i install it again. Now i'm looking for some idea to protect the website from hackers.
 
zebestof230 said:
Hello !

Use this plugin : wordfence

Wordfence is a security plugin for web sites that use WordPress. It provides various features and configuration options for site owners to protect their sites from intrusion.

+Install all new Wordpress updates when proposed.
And of course have a back up in case something wrong happen
Click to expand...
Yes it's a good plugin when my website got hacked i install this plugin and i start scan the plugin show me the shell.php link and many danger thing the attacker upload it on my website.
Thank you
 
Love Wordfence. From personal experience that’s my recommendation.
 
You get 4k-10K IP per day and you don't even know wordfence plugin? Bro, this is not right at all lol, how you survived even before that? Wordfence is nearly a must for wordpress.
 
terrycody said:
You get 4k-10K IP per day and you don't even know wordfence plugin? Bro, this is not right at all lol, how you survived even before that? Wordfence is nearly a must for wordpress.
Click to expand...
Yes bro i install it after my website get hacked lol. I hop this not affect my ranking.
 
That is why i do not download nulled plugins i see shared on this forum. You can use it on on a free hosting service but not on your money site. I made the mistake to download a nulled plugin from here and used it on one of my money sites and it was hacked. I had to restore the website and change the password to my hosting service.
 
terrycody said:
You get 4k-10K IP per day and you don't even know wordfence plugin? Bro, this is not right at all lol, how you survived even before that? Wordfence is nearly a must for wordpress.
Click to expand...

I read yesterday that there was some security breach with wordfence plugin so it is not 100% safe.
 
I installed 2 plugins, wordfence and all in one security,
I heard that Sucuri is the best out there.

hope you get your site back mate,
update us on your journey, might help other wp mates here~
 
moneyguru2013 said:
I made the mistake to download a nulled plugin from here and used it on one of my money sites and it was hacked.
Click to expand...

Did you virustotal the plugin before you install it? I only download Festinger's things and always virustotal the file before use it, no problem till now.

I am wondering if Virustotal can detect any wordpress malicious code?
 
I like Wordfence as well but I think it slows down your website. I think you should go with the Cloudflare pro plan, it will cost you 20$/m. You get a list of rules automatically created to protect WordPress sites plus a lot of other lists such as PHP rules, Flash rules, and 2000+ OWASP rules. all this including fast caching, Brotli compression, and so on.

Hope this helps.
 
First of all.. what a hell are you going with a unupdated plugin? That is a opened door for hackers.

Aldo wordfence is not a Bulletproof against hacking. That is a stupid thing.. ir you think you will be protected from hackers.

The best thing to do is secure server. Doing security hardening and scans, permissions and closing ports.

I laugh when i see somente recoomending wordfence... Thinking he is gonna save entre world. Either is not entirely true.
 
What about Sucuri plugin? Yeah Cloudflare pro plan is a very good option, oh yeah, also try using hcaptcha for your logins and contact page. it's a wild wild world out there.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top