There is a security hole in the template. Malware inserts the code http://prntscr.com/gkyoub into the template
Hello bednarp,
Please note that the theme has to be updated along with WordPress and plugins. Old versions can have security breaches and these can be exploited by different tools.
Please make sure you update your theme, plugins, and WordPress and do not stick to old versions.
If you have been the victim of an attack, update your theme immediately to the latest version and use one of these guides:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
Here is a link for best WordPress security practices created by Chris S:
https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
Thank you!
See last sections here on how to ‘clean up’ your site if it’s already compromised with old version of theme/WordPress:
https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
Here more info – Infected Custom Javascript Setting of the Newspaper Theme
https://blog.sucuri.net/2017/09/old-themes-abandoned-scripts-pitfalls-cleaning-serialized-data.html
Hello bednarp,
Please note that the theme has to be updated along with WordPress and plugins. Old versions can have security breaches and these can be exploited by different tools.
Please make sure you update your theme, plugins and WordPress and do not stick to old versions.
If you have been the victim of an attack, update your theme immediately to the latest version and use one of these guides:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
Here is a link for best wordpress security practicess created by Chris S:
https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
Thank you!
Ok, I’ve already solved the problem 🙂
Updating the template solved the problem (more precisely – complete deletion of the old template, and uploading the new template to a new folder, updating the old template did not work).
Correct. Proper method to update anything in WP is to *delete* old folder and upload new one — never “overwrite” or merge folders.
