• I am having a typical issue with my wordpress hosted site. The site got hacked in the first week of August 2016. After many emails the site was restored by the hosting service, but a strange problem persists. While the site is working fine with current theme (mesocolumn), when I try to change the theme it gives me back the page it displayed when it was hacked !

    This could not be resolved till date after multiple restorations and attempted trouble shootings by freelancers. I have ultimately moved the hosting, hoping that this will resolve the issue. However that has not happened yet.

    Wondering where to go from here.

Viewing 4 replies - 1 through 4 (of 4 total)
  • when I try to change the theme it gives me back the page it displayed when it was hacked

    That part there really does seem to suggest that what ever theme you’re trying to switch to has the hack code left in it, and either displays that, or re-performs the hack when it’s activated.

    The simple thing to do is to delete that theme. If you do want ot use it, delete the exsiting one fully (I’d suggest using FTP to be sure) and then re-install a new fresh clean version of the new theme.

    Oh, and keep a backup. If that theme is the problem, your site could get hacked again.

    Yes i agree with catacaustic. I faced a similar issue and culprit was a third party plugin which i was using on my site to upload images.

    Thread Starter bhopale

    (@bhopale)

    @catacaustic That did not work. Deleted themes and downloaded fresh versions – when changed it gives the same error. @rowenharring The plugin problem could be it. How did you manage to pinpoint though ? Deleting the plugins one by one and reinstalling, is it ?

    Hi @bhopale

    Activating / Deactivating plugins would definitely do the trick, but be mindful it’s a manual and in some instance a timely process. I would also check your widgets as well…

    FYI – for what you described, changing hosts would not have done anything like you’ve seen. The issue is in the application, so if you moved the dirty application to another provider then you simply moved the issue. Another good place to look might be the database.

    Here is a guide that might help as you troubleshoot: https://sucuri.net/guides/how-to-clean-hacked-wordpress

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Unusual probelm with wordpress’ is closed to new replies.