• Resolved fotonotes

    (@fotonotes)


    Spam is being inserted into our blog posts emails from Subscribe2 — not the posts themselves (as far as I can tell) but the daily emails that go out to subscribers.

    Here’s an example of text that was inserted (I’m happy to send the entire Subscribe2 email if you’d like):

    Funds will deter lenders a bank statements id viagra viagra number of how quickly approved.Repayments are unlike a wealth of years viagra viagra to cash extremely easy.Another asset to prove your time is what your cialis cialis first borrowers will receive bank information.

    Any idea how this is happening? Suggestions to prevent it? We’re using version 9.0 of Subscribe2.

    Thanks!

    http://ww.wp.xz.cn/plugins/subscribe2/

Viewing 7 replies - 1 through 7 (of 7 total)
  • @fotonotes,

    First thing to check for is another plugin adding this content by disabling them all and testing again.

    Next, check your WordPress install using Exploit Scanner to see if your core files are unchanged.

    Thread Starter fotonotes

    (@fotonotes)

    Thank you! We’ve got 16 active installed plugins (see below). Is there any way to know which ones are likely culprits? Turning each one one/off and testing could take quite some time.

    Add Meta Tags, Advanced Custom Fields, BackUpWordPress, Black Studio TinyMCE Widget, Breadcrumb NavXT, Display widgets, Duplicate Post, Feedburner Email Widget, Google Analytics for WordPress, Image Widget, Pre Loaded, Search & Replace, Slick Social Share Buttons, Subscribe2, Subscribe2 widget, WP Social Icons

    @fotonotes,

    Two things:

    1/ You are using a FeedBurner email widget – are you sure the emails with these inserts are not from that and it’s an advert rather than from Subscribe2?

    2/ To test try sending a preview email in Subscribe2 from Subscribe2->Settings in the Template tab. Does that contain this additional information?

    Thread Starter fotonotes

    (@fotonotes)

    Thank you for the speedy reply.

    1. It looks like the spam inserts are indeed coming from FeedBurner, not Subscribe2 (sorry about that). We haven’t been actively using Feedburner, so I turned it off (I’m subscribed, but our other subscribers are using Subscribe2).

    2. The preview email (text) doesn’t include the spam text.

    So I believe you solved the problem (which, indeed, wasn’t really a problem with Subscribe2). Thank you!

    @fotonotes,

    That’s great. I’m glad we found the issue and I’m more glad it turned out to not be Subscribe2! 🙂

    Thread Starter fotonotes

    (@fotonotes)

    I took your advice and removed the Feedburner plugin. However, the problem is persisting. I just received another auto-email from the blog with the spam inserted. It appears that it’s coming from Google’s Feedburner, but I’m wondering how that’s possible. Any ideas?

    @fotonotes,

    The plugin you disabled will stop new subscribers to the FeedBurner emails but you’ll have to also stop feebburner parsing your site’s feeds to stop the emails. You’d need to have a look on the FeedBurner site about how to do that. I don’t use it so I have no idea.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Spam being inserted into Subscribe2 emails’ is closed to new replies.