When we activate the theme we bought from you, we redirect to other virus sites from the site’s homepage. When we activate a different theme, this problem is getting out of hand.
Link to our site http://www.ekopangea.com
Which theme version, specifically?
And, did you uninstall any old versions of the theme you might have used in past from TagDiv?
Also which version of WordPress?
Hello brtaydn,
Please note that the theme has to be updated along with WordPress and plugins. Old versions can have security breaches and these can be exploited by different tools.
Please make sure you update your theme, plugins, and WordPress and do not stick to old versions.
If you have been the victim of an attack, update your theme immediately to the latest version and use one of these guides:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
Here is a link for best WordPress security practices created by Chris S:
https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
Thank you!
Hi I am experiencing the same problem, my website was hacked and I have managed to clean the wordpress installation but not the theme.Redirect problem occurs only when Newsmag is activated, if any other theme is activated this problem stops, and I tried different versions of Newsmag they all are effected, i.e. they all redirect to spam links, so updating/downgrading the theme doesn’t help. I don’t know what else to try, do you have any suggestion?
Hello makkis001,
Sorry for this inconvenient! Try to make a new clean install from scratch, remove the old theme version and install it from scratch via FTP way because this is the surest method in this regard. This is the only solution in this case, sorry!
Thanks for the message!
We downloaded and reinstalled the latest version of WordPress, and we reinstalled the theme we bought, but it still continues.
Hello brtaydn,
PLease send us an email at contact@tagdiv.com with your log-in information (wp-admin) so we can further inspect it closer your setup page. Provide there the link to this topic so w e can quickly identify you.
Thanks for your understanding!
We have sent the information to the mail address you provided
Make sure you clean your wp_options table in your dbase, too.
If you don’t do that, infection can still be there!
See:
https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
Hi,
If you have not solved our problem, the problem still persists.
I don’t work here, so I won’t be doing anything to fix your website for you, only giving pointers on how you can learn to do so yourself.
Good luck.
Hello,
Maybe these guides will help:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
Thank you!
Thanks for the guides, they are very basic but provide a good guideline, not enough when you are trying to remove a malware. In my case I had an entry on the header.php (easy to spot and remouve) but also a js script was inserted into theme panel custom js of Newsmag theme. It was an harmful script and was loading a js.trysomethingnew.eu that was redirecting to malicious website. It’s a Newsmag theme vulnerability, so I have updated the theme into latest version.
Hi,
Yes, you definitely should update to the latest version if you use older versions of the theme. The theme should be kept up to date along with WordPress and plugins to prevent any security exploits from older versions.
Thank you!
And read the post I linked to earlier on, which has some solutions and pointers to stay secure if continuing to use WordPress.
