Hello,
I am using Newspaper Theme on my website http://www.telugu9pm.com. For some reason, since few days – my Theme’s Header Ad zone is replaced by another Ad which is kind of pop-up/redirecting Ad. I have no idea how is it getting updated repeatedly even after I remove it completely. I am the only user has Administrator rights on my wordpress. Can you guess how is this change happening? Can we update Header Ad from server level (just in case to guess if my server is compromised)?
Reply me if you have seen cases like this before.
Thanks
a) change all your passwords immediately; make sure NOT using any account called ‘admin’; disable XMLRPC in your theme config file; install limit login attempts plugin. See section on WordPress.org about ‘hardening’ WordPress.
b) remove all old/unused plugins and themes
c) make sure you’re on latest version of WP
d) scan site with Securi
e) consider doing clean version of WordPress via FTP; delete old version upload new
f) consider clean install of all plugins and themes via FTP, delete old
g) disable/clear any / all caching plugins completely
h) check your htaccess file for any redirects
Perhaps first disable all ad units in your theme panel or any ad plugin completely, see if ads still generated when doing view source; disable or remove plugins one by one to see if hacked plugin.
Good luck!
Once you clean house, make proper backups for safe keeping.
