natepayne

I have also contacted TSO and they have said this is “certainly not a server side vulnerability”.

They were unable to find malware which to me means the issue has to be due to the server?

I changed mysql username and password, updated all auth keys for wordpress and changed passwords for wordpress users.

Also scanned all files for malware and nothing was reported.

Since all of that the site has had this hack happen again – although this time the JS now redirects the website to another spam advert site.

Also scanned the computers here in the office and all are clear of malware and viruses.

• This reply was modified 9 years, 3 months ago by natepayne. Reason: more info

I am having this exact same problem. All plugin updated, files scanned for malware but the hack appears again hours later.

Just away to change the db user details in hope that it works.