Security issue – Capabilities

  • santacorp

    (@santacorp)


    4 years, 6 months ago

    Hello, yesterday I had a security breach on my website https://lesmysteresdenoel.com/. There was a redirect hack that referred users to malicious links. It seems that this has been linked to the Capabilities PublishPress plugin which was breached in version 2.3.0. I was able to learn this via this topic https://ww.wp.xz.cn/support/topic/recent-security-issue-2/ which had the same problem as me: new user named wpuser_randomsuitofletters.

    The problem was solved yesterday with a restoration of the web space via OVH 3 days before. Today the site has been compromised again, the website is displayed abnormally and I cannot access the back office. The login page has changed and reads “the site is unreachable” this will relate to ch.trainresistor.cc. We also did a restoration of the site a week before which did not change anything.

    Does anyone have any idea how to fix my problem, this is an advent calendar website where a multitude of users visit every day.

    Thanks in advance

    The page I need help with: [log in to see the link]

The topic ‘Security issue – Capabilities’ is closed to new replies.