I have been replaced my files to files before attack and update Newspaper to the last version.
But it’s hard to replace my db on previos due to some constraints on the server.
Wordfence didn’t find virus files on my site, but always in my db appear td_live_css_local_storage with injection code.
How I can eliminate this injection in my db?
Hello!
This issue has been discussed already here: https://forum.tagdiv.com/topic/wp-zexit-malware-and-newspaper-theme-problem-please-see/
Thank you!
Okay Bettina, but can’t you just tell us where to find the back door that injects the malicious code on the database so that we can remove it perhaps by making simple changes to the affected php file?
Thanks
Hello!
If you check in on that topic, there is a solution. Please try it and check if that solves your issue.
Thank you!
