I have installed WordPress and the theme, worked on the site, added plugins and suddenly new users got forwarded to spam sites on the first visit. After refreshing the browser our site got shown and this did not happen anymore.
We tried to identify this issue, but couldn’t find it.
We now reinstalled a fresh WP version and the theme again.
We installed the required Newspaper plugins from tagdiv (CloudLibrary, Composer, Social Counter). And we added the Slider Revolution as an additional plugin and the UberMenu.
The site worked for a few days. We haven’t done any changes to it and suddenly the users gets forwarded to spam sites again on their first visit.
Here is an example link it gets redirected to:
http://tandabu.space/?u=h2xkd0x&o=lxkgnum&t=201
I’ve checked the forum, but only see older entries with similar matters.
Thanks for the support!
Hi,
Please check:
https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
Also:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
I hope this helps.
Thank you for your reply Vlad S. Several months later we run into the same issue again. I’ve added all the information we’ve found so far in this StackOverflow topic: https://stackoverflow.com/questions/60351128/password-protected-wordpress-site-with-tagdiv-newspaper-theme-gets-infected-by-m
Hopefully you are able to have a look.
Fresh install on wordpress, Newspaper theme. Please make sure that you’re downloading the 10.3 version from here: https://themeforest.net/item/newspaper/5489609 After that restore old database and uploads folder. Before re-uploading the UPLOADS Folder please check for .php files. There should be none of them.
Also please check your permissions as you can see in this guide: https://wordpress.org/support/article/changing-file-permissions/
I hope this was more helpful !
Thank you !
Are you aware of any security issues on previous versions of the Newspaper theme? I looked at the change logs but couldn’t find any notifications about it.
We’ve manually removed all the malware from the files and compared all of them with the latest original ones to make sure it’s all gone. We’ve also deleted all php files that could be linked to the malware.
Do you know what to look for in the database specifically for malware infected websites?
Just for your info: Most malware files could be found within the theme folders.
Hello !
We are not aware of any malware and didn’t have any reports on this. As mentioned above, in order for out products to be displayed on Envato Market they have to be “clean” and we have tested and also the Envato theme tested it.
If you have re-uploaded a fresh theme and you still have the malware I would suggest you a new WordPress because that can be the issue. If your wordpress is infected you can try other themes too and you should have malware on them as well. That is why we suggested the method above. Installing a brand new wordpress, re-download the Newspaper Theme and check if there will be any Malwares after that. It is a radical measure but me personally that is what I would do in this case.
I hope this was helpful !
Thank you !
