WARNING- Check your blogs

makingfastcash22

Senior Member

Feb 15, 2009

1,159

180

• Jun 12, 2011

• #1

I read on another forum to install the exploit scanner plugin and found that I have some kinda javascript injection on some of my wpr posts...

I will be needing to bulk edit a lot of posts...

So just a word of warning...

scan using this often... look especially for base64 encrypted crap....

If your not making money.... some one else could be from your sites.

the plugin is free from wordpress.org just search for exploit scanner.

HTH

 

dizz

Elite Member

May 19, 2009

2,069

1,799

• Jun 12, 2011

• #2

Do you have to have that plug in for the problem to occur?

 

B

Boxxy

Newbie

Mar 29, 2011

13

2

• Jun 12, 2011

• #3

Would you mind telling us which plugins you have installed on your blog??

 

G

GORILLA

Newbie

Apr 8, 2011

41

40

• Jun 12, 2011

• #4

dizzspaceteam said:

Do you have to have that plug in for the problem to occur?

Click to expand...

The plugin he is talking about is the one that FINDS the exploits, not the reason for the exploit.

 

makingfastcash22

Senior Member

Feb 15, 2009

1,159

180

• Jun 12, 2011
• Thread Starter Thread Starter

• #5

Here is the link to use to see if you have any exploits http://wordpress.org/extend/plugins/exploit-scanner/

 

makingfastcash22

Senior Member

Feb 15, 2009

1,159

180

• Jun 12, 2011
• Thread Starter Thread Starter

• #6

The plugins vary in my blogs....

If there is anything wrong it will show what it is...

Defineately worth checking if you use any free themes or shared premium plugins.

 

BlackxHat

Power Member

Oct 6, 2009

729

89

• Jun 12, 2011

• #7

will check

 

dizz

Elite Member

May 19, 2009

2,069

1,799

• Jun 12, 2011

• #8

ty very much
Dizz

 

lmaestro

Power Member

Jan 28, 2011

667

230

• Jun 12, 2011

• #9

fuck i just found this on my theme (gzuncompress(base64_decode($QD809) its on LEVEL SEVERE

how do i remove this?i just changed the theme and run it again but it still detected it.
what theme are u using?
im using flexibilty3 theme.

 

Last edited: Jun 12, 2011

DebtFreeMe

Regular Member

Mar 14, 2010

430

374

• Jun 12, 2011

• #10

gzuncompress is part of wordpress, it sounds like it may be a false positive like the plugin says you can get. This is probably why you're picking it up in both themes.