Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter snickersvickers

    (@snickersvickers)

    Id certainly agree that rev slider is a potential culprit as nearly everyone of my sites had it installed.

    I also believe my users where using nulled theme and scripts too.

    Since Ive moved server and did what i mention earlier in the post ive not had any issues 🙂

    Thread Starter snickersvickers

    (@snickersvickers)

    UPDATE ———————-

    Since re-installing wordpress (not overwriting but deleting wp-admin, wp-includes, root files then uploading a fresh copy) and moving to a new server with separated cpanel accounts for each domain i have still not had any attacks. I must add i have done a few things on the server to harden the security within the apache module.

    On a side note it be useful for people to list their themes and plugins so i can cross reference them with my websites themes and plugins. Perhaps i can narrow it down to help others where the issue may be.

    Thread Starter snickersvickers

    (@snickersvickers)

    UPDATE: Ive recently separated all my domains to their own webspace and cpanel etc and moved hosts. The last thing i did to them prior to this was reintstall the core wordpress files (not overwriting but deleting wp-admin, wp-includes, root files then uploading a fresh copy)

    So far nothing has been infected but if one of them does ill post it up on here.

    My other suspicions is the host i was on (justhost) was being an easy target for their ip addresses and servers etc…. maybe i don’t know for sure.

    Thread Starter snickersvickers

    (@snickersvickers)

    The infected line is at 487 nav-menu.php

    [ Malware redacted, please do not post that code in these forums ]

Viewing 4 replies - 1 through 4 (of 4 total)