Does the file /jepsxe.php exist on your site?
If it doesn’t, then don’t wory, it’s bots trying to exploit 404 pages or searching for past exploits.
If it does, that means that your site has been hacked. Read through this and take the actions that you need to so you can secure your site.
FAQ My site was hacked
Thread Starter
rshay
(@rshay)
Hello, thank you for your reply!
the file (not the example i mentioned but the real one i was referring to) does exist but does it always mean that the site has been hacked? I was told the file is a core wordpress file. i have a plugin that lets me see member’s history and have not seen anything suspicious. The only thing is that theyve been using that link to try to guess the passwords of my community members. This has been happening for some months now.
Thank you
WordPress files in the root directory are not called that, or any sort of combination of random letters in the file name.
If it’s part of one of you rplugins, look at the source code of the file. It will say near the top that it’s part of *something*. If it doesn’t, your site’s been hacked.
