Hello,
I would like to know what kind of hack or what the hell is this??
It always appeares after Quick edit of any kind of site / stuff like posts, sites and also sometimes during page loading. I would like to know how to deleted this and how to secure my site to prevent of future hacks?
Check your site with Securi scanner;
make sure you delete old plugins which have not been updated since WP 4.2 for all the cross site scripting issues – and/or which are noted as insecure from the WordPress.org support pages for each plugin.
Change all your passwords.
Make sure you delete your admin account after making a new one which is NOT called “admin”.
Use things like “limit login attempts” to stop hacks.
Don’t allow people to create accounts on your site or upload files.
Make sure you use Akismet for comment spam.
Make sure you have clean backups of your dbase from the server.
Turn off all your plugins except VC and see if that issue remains!
You may find this post useful!
https://premium.wpmudev.org/blog/wordpress-security-tips/
Hello,
I’ve tried everything and nothing helped. The links still show up.
Then your site likely got hacked due to a zero day flaw where somebody hacked the site before you had applied the security patches of the past couple of months for WordPress and various plugins; and/or your host didn’t properly secure their server.
Best bet is to
disable all advertising systems entirely …
a) reinstall all plugins – check all plugins on WordPress.org FIRST to see if they are updated in 2015 for security; if not then don’t use them; don’t use any plugins from free websites, abandoned plugins from Envato, etc. — YOU need to audit all your plugins one by one; perhaps use Securi to scan your site first!
b) reinstall WordPress; delete all themes not being used; all third party themes; start with twenty-eleven
c) douhle check your htaccess and wp-config files to see that nothing odd was added
d) ask your hosting provider to do a security scan of your site for virus/malware
perhaps do these first:
e) double check your comments for spam you have not deleted; consider turning off all comments if you are not using security checks for comment spam
f) do a search on your site for the term “Viagra” to see if content injections are being done into your posts — this is sure sign you have been hacked and/or have malware plugin
Securi site scan:
https://sitecheck.sucuri.net/
Hello,
I disabled ip block plugin and Sucuri scan says that my site was hacked by BlackHat SEO Spam. SO what should I do now?
Thank you.
I have already founded the source of this problem. The file “wp-head.php” was hacked. I deleted it and also deleted:
/** Outputs the WordPress header. */
require_once(ABSPATH . ‘wp-head.php’);
from “wp-confing.php”.
Great.
So this would be a good time to re-evaluate your procedures for backups, checking your site for updates, only using “trusted” plugins, using tools like “limit login attempts” and changing passwords regularly.
You should still likely install FRESH copies of all plugins and wordpress to ensure nothing else hidden away that you missed.
