Hello,
Our site has been getting infected all the time http://www.westfaironline.com. I have worked with our hosting system wpengine to have it clean. But every time they clean it, it gets infected again. Here is what they have to say:
Ok so the main issue here is that their Newsmag theme is very outdated:
Warning: Vulnerable tagDiv Theme Newsmag theme found at ./wp-content/themes/Newsmag/includes/tagdiv-config.php – Version: 5.2.3 – Please update this theme or switch it immediately: https://wpscan.com/vulnerability/038327d0-568f-4011-9b7e-3da39e8b6aea.
Sadly with this malware if the vulnerable code is present then the injection comes back right away after cleaning it. The theme needs to be updated.
I checked the version info from within their wp-admin panel and it reported that there was an issue with their license key. The theme is also quite outdated (they are using 5.2.3 but they need to update to version 12 to get this patched).
So I’m afraid that the client is going to have to either contact TagDiv and get their license key issue sorted out or, alternatively, switch their theme:
—-
Please reset the key from the System status tab and try to activate it again, or contact our customer support team at contact@tagdiv.com.
Can you please let me know how I can get this resolve.
Thank you
Dan V.
Hi danvcreative,
The Newsmag theme does not have version 12, only 5.2.3. What you need to do is to check also the WordPress files, those can be also infected:
– Change admin passwords and delete admin accounts you are not familiar with;
– Delete any weird/unknown plugins;
– Delete the weird/unknown themes;
– Clean unfamiliar Theme Panel injected code (example – https://i.imgur.com/4q70kCv.png);
– Clean WordPress files (example – https://i.imgur.com/stJCqiK.png)
If you have gone through the steps above and are still facing issues, don’t hesitate to contact us via email at contact@tagdiv.com. We’ll be ready to help you as soon as possible.
Thank you!
