Title: Vulnerability problem?
Last modified: August 24, 2016

---

# Vulnerability problem?

 *  Resolved [clauz](https://wordpress.org/support/users/clauz/)
 * (@clauz)
 * [11 years ago](https://wordpress.org/support/topic/vulnerability-problem/)
 * Hi there… I don’t have the technical knowledge to know where in the code there
   is a hole or entry for a hack but I have a site that despite of being reinstalled
   from scratch over and over and after following all the “I was hacked” pages and
   advise, kept being reinfected over and over…after weeks of reinstalling and removing
   plugins one by one and thoroughly checking my theme…I was down to simply WP core,
   one custom theme and askimet (no uploads folder either) and every single day 
   I was infected with a variant of Pharma Hack.
    DB checked for suspicious entries…
   nothing there. I inspected it all myself.
 * New files that were encrypted that loaded spam tags on the header and also caused
   some redirects were created and scattered around wp core files every single day.
 * Removed askimet and voila…. site clean for the first time in weeks. I re-installed
   the plugin and only this plugin and again reinfection.
 * I would not be writing if I didn’t test this myself over the course of several
   weeks reinstalling new clean versions of wp core files and new clean versions
   of of the few plugins they ran and removing one by one, one per day. Askimet 
   was left for last because I never thought it could be the culprit.
 * Sorry for not being able to provide more info in terms of what it is in askimet
   code that is being exploited.
 * Thought you should know 😉
 * [https://wordpress.org/plugins/akismet/](https://wordpress.org/plugins/akismet/)

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [Christopher Finke](https://wordpress.org/support/users/cfinke/)
 * (@cfinke)
 * [11 years ago](https://wordpress.org/support/topic/vulnerability-problem/#post-6150192)
 * The most likely explanation is that your server is vulnerable, and the specific
   hack that is targeting it uses Akismet’s plugin directory as its target. Akismet
   itself doesn’t contain any hacks or known vulnerabilities.
 * This list is a good starting point for what you should do: [https://codex.wordpress.org/FAQ_My_site_was_hacked](https://codex.wordpress.org/FAQ_My_site_was_hacked)
 *  Thread Starter [clauz](https://wordpress.org/support/users/clauz/)
 * (@clauz)
 * [11 years ago](https://wordpress.org/support/topic/vulnerability-problem/#post-6150204)
 * Sorry to hear that…I know that link and the other ones that are pasted here almost
   automatically by heart. I wrote after going through the same procedure (same 
   one explained on the link) day after day for weeks.
 * And like I said…I took the time to go one by one…to reinstall fresh files, to
   check the theme coded 1000 times and the db…it all came down to having askimet
   installed….that was the ONLY thing that made a difference….maybe a coincidence?
   maybe, maybe not.
 * Have a nice day!
 *  [sleepymonk](https://wordpress.org/support/users/sleepymonk/)
 * (@sleepymonk)
 * [11 years ago](https://wordpress.org/support/topic/vulnerability-problem/#post-6150405)
 * Askimet update 3.1.2
    Release Date – 7 June 2015 Included in release per changelog:“
   Pre-emptive security improvements to ensure that the Akismet plugin can’t be 
   used by attackers to compromise a WordPress installation”

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Vulnerability problem?’ is closed to new replies.

 * ![](https://ps.w.org/akismet/assets/icon-256x256.png?rev=2818463)
 * [Akismet Anti-spam: Spam Protection](https://wordpress.org/plugins/akismet/)
 * [Support Threads](https://wordpress.org/support/plugin/akismet/)
 * [Active Topics](https://wordpress.org/support/plugin/akismet/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/akismet/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/akismet/reviews/)

 * 3 replies
 * 3 participants
 * Last reply from: [sleepymonk](https://wordpress.org/support/users/sleepymonk/)
 * Last activity: [11 years ago](https://wordpress.org/support/topic/vulnerability-problem/#post-6150405)
 * Status: resolved