Nasty Wordpress hack, please help

by 11 replies
13
Hi, when I looked today on my WP blog I saw what looks like a header/page added to my frontpage. It cantains a picture of a young woman and some links. The source of the picture is http://i.nuseek.com/images/template/...le_student.jpg

I read some on WP hacks and changed all the WP files (except content). That didn't work, so I tried using a different theme. It solved the problem so I was sure something was wrong within the theme files. I looked at everyone of them, couldn't find a thing, then decided to delete the theme and upload a new version of it. After activation, again the same!

How is this possible, it's only happening with that specific theme, yet completely replacing it with a fresh version doesn't do anything???

Any ideas, really need this fixed asap...
#programming #hack #nasty #wordpress
  • I think I've seen that image on expired domains which are parked.

    If it's not that, then maybe your WP install has been hacked.

    What is the domain?
    • [1] reply
    • Yes I know it's been hacked

      the domain is smoothiemakerreviews.net. I just put up the standard theme that works but will put the other one back on so you can see it.
  • If only I had 15 posts then posting links would be much easier. Anyway this post is talking about your issue but it's 3 years old. Are you using a very old version of WP?

    wordpress dot org/support/topic/need-help-please-2

    Paul.
    • [1] reply
    • Thanks, but was on that site and did not offer a solution.

      BUT, after hours searching I finally found the problem, and would NEVER have guessed it: a PRE-HACKED template version of the legitimate one (that's also free by the way). Unbelievable, I changed it to the real version and it's working like a charm.

      People, pay attention downloading themes from wpblogskins.com, wordpresstemplates.com and wordpressthemes2.com

      They are evil!
      • [ 2 ] Thanks
      • [3] replies
  • Good catch!
    • [1] reply
    • It's so tricky because no matter how long you compare your code with the original files, you won't find a difference.
  • I saw the website. It is solved I think. However, few things that you must keep in mind are:

    1. Never use pirated wp themes.
    2. Never buy themes from unknown sources.
    3. Before installing plug-in check the reviews.

    Since your website is not totally defaced, I do not suspect shell on your server, so relax

Next Topics on Trending Feed

  • 13

    Hi, when I looked today on my WP blog I saw what looks like a header/page added to my frontpage. It cantains a picture of a young woman and some links. The source of the picture is http://i.nuseek.com/images/template/...le_student.jpg I read some on WP hacks and changed all the WP files (except content). That didn't work, so I tried using a different theme. It solved the problem so I was sure something was wrong within the theme files. I looked at everyone of them, couldn't find a thing, then decided to delete the theme and upload a new version of it. After activation, again the same!