• [ Moved to Fixing WordPress]
    I recently discovered that someone was able to get into my site, edit a blog post with a link to an outside site, and somehow do this undetected by me.

    My first thought was to immediately change my password, but the user profile page only allows me to generate a new password. That’s not what I want. I have a hard enough time remembering passwords as it is. I want to change the password to something I can remember.

    Also, what else do I need to do to prevent this from happening again? I’m using Jetpack premium.

Viewing 1 replies (of 1 total)
  • Moderator t-p

    (@t-p)

    – The Exploit Scanner plugin can help detect damage so that it can be cleaned up. Other things you should do:

    • Change passwords for all users, especially Administrators and Editors.
    • If you upload files to your site via FTP, change your FTP password.
    • Re-install the latest version of WordPress.
    • Make sure all of your plugins and themes are up-to-date.
    • Update your security keys.
    • See FAQ My Site Was Hacked.

    – When you’re done, you may want to implement some (if not all) of the recommended security measures.
    – If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you (e.g., Sucuri, Wordfence …).

Viewing 1 replies (of 1 total)

The topic ‘Security issue’ is closed to new replies.