Title: Functions.php compromised
Last modified: March 19, 2019

---

# Functions.php compromised

 *  [tharum](https://wordpress.org/support/users/tharum/)
 * (@tharum)
 * [7 years, 2 months ago](https://wordpress.org/support/topic/functions-php-compromised/)
 * I’ve found one of WordPress sites compromised. The Functions.php file contains
   some scripts that I suspected that making the functionalities of the WordPress
   dashboard reduced. For example, cannot go to Comment section even with Admin 
   privilege. Cannot add new plugins even with Admin access.
 * I tried to deleted and uploaded a new Functions.php file that’s clean. The next
   day, the compromised file is back. It seems it’s automatically replaced.
 * Please see the content on this functions file below and help advise me how to
   fix this malicious stuff.
 * _[Large code redacted, please use a paste service]_
    -  This topic was modified 7 years, 2 months ago by [Marius L. J.](https://wordpress.org/support/users/clorith/).
      Reason: Removed copy-pasted core file
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Ffunctions-php-compromised%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Naveen Kharwar](https://wordpress.org/support/users/naveenkharwar/)
 * (@naveenkharwar)
 * [7 years, 2 months ago](https://wordpress.org/support/topic/functions-php-compromised/#post-11328471)
 * Hey
    Can you provide some more information like!
    - WordPress Version installed?
    - Theme you are using?
    - Is this problem still there when you deactivate all plugins?
    - Is this problem still there in Twenty Nineteen
 *  -  This reply was modified 7 years, 2 months ago by [Naveen Kharwar](https://wordpress.org/support/users/naveenkharwar/).
    -  This reply was modified 7 years, 2 months ago by [Naveen Kharwar](https://wordpress.org/support/users/naveenkharwar/).
 *  Thread Starter [tharum](https://wordpress.org/support/users/tharum/)
 * (@tharum)
 * [7 years, 2 months ago](https://wordpress.org/support/topic/functions-php-compromised/#post-11328488)
 * Already updated to the latest 5.1.1.
    theme: [https://wordpress.org/themes/apex/](https://wordpress.org/themes/apex/)
   still problem even after switching to 2019 theme.
 *  [Minerva Infotech](https://wordpress.org/support/users/minervainfotech/)
 * (@minervainfotech)
 * [7 years, 2 months ago](https://wordpress.org/support/topic/functions-php-compromised/#post-11328662)
 * Hi tharum,
 * First check it whether your “WordPress” updated with latest version or not. If
   not, then update website. Same questions for all plugins and themes. Then you
   can disabled all plugins and activate one by one. In this process you have to
   check whether any plugin is creating issues.
 * Also, you can install “Wordfence” plugin which will scan your all the files and
   produce reports. It will block unwanted access in your admin panel.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Functions.php compromised’ is closed to new replies.

## Tags

 * [Compromised](https://wordpress.org/support/topic-tag/compromised/)
 * [hacked](https://wordpress.org/support/topic-tag/hacked/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 3 replies
 * 3 participants
 * Last reply from: [Minerva Infotech](https://wordpress.org/support/users/minervainfotech/)
 * Last activity: [7 years, 2 months ago](https://wordpress.org/support/topic/functions-php-compromised/#post-11328662)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics