We have had a website user say that our website that is using newsmag theme is pushing browser notifications of the secular type and after some research we have found this page – https://blog.sucuri.net/2018/08/massive-wordpress-redirect-campaign-targets-vulnerable-tagdiv-themes-and-ultimate-member-plugins.html
we would like to completely disable any push notifications that the theme is serving how do we do this? we have done a malware scan and nothing has been returned….so we are reaching out to you to help us solve this issue.
we are using version 4.5
Likely want to audit all installed plugins, and all fields in the theme in case you were hacked from out of date version of theme, plugins, jquery, WordPress, etc.
Also check your theme with console in chrome (F12); run ‘best practices’ checkup, look for ‘console errors’ also.
See the sections in this tutorial on cleaning hacked site:
This is a very good read:
https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
