verdipro

I sent over the email. I am going to close out this thread as well, thank you.

Thank you again for your assistance with this. We are still trying to pinpoint the issue. Nothing shows in the files in or outside of WP and also searches within the database for keywords that we have seen on some of the spam URL pages are not showing. We haven’t see anything like this hack in the past. However, a full clone of the site in a new WP install doesn’t show any traces. So it looks like its in another directory somewhere even though we haven’t found a trace of it. But safe to say this would explain why Wordfence didn’t pick it up.

I’ll look deeper at that. One specifically that I know the URL works doesn’t show in the database with a search. So it is embedded somewhere else. But would Wordfence typically pick up those?

Rule updates went well

Your rules have been updated successfully. You are currently using the free version of Wordfence. Upgrade to Wordfence premium to have your rules updated automatically as new threats emerge. Click here to purchase a premium license. Note: Your rules will still update every 30 days as a free user.

File system check is good

Checking if web server can read from ~/wp-content/wflogsOK

Scan

I will need to run the scan again. Time limit was reached. On the previous installation I removed the time limit, but even after completing it didn’t find anything. Unfortunately I don’t have access to those logs after the reset. But I will run it again and then send over.

The previous scan has terminated because the time limit of 3 hours was reached. This limit can be customized on the options page. (opens in new tab)

Peter,

Thanks for the info and update. I did delete the plugin twice, but when I reinstall it the same error comes up and then I can’t get into the admin unless I deactivate the plugin through my hosting control panel. Is there a different way to make sure that when I delete it is removing all references of Wordfence? Then from there, I can do a fresh install and run a scan to see if it picks up anything.

I tried to paste it in again and clicked saved and it accepted it. If I tried to get it automatically then I would receive the error. So all looks good now, thank you.

Understood, thank you. So ultimately the only way to do a “drill-down” approach would be to recreate the Zenfolio groups and sub-groups as pages within WordPress. And on each group page add the shortcode that references it?

If so, in my case that might be possible since its only roughly 20 pages.