1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

Wordpress Hacked With Changed Titles and Text Insertion

Discussion in 'WordPress' started by akoj, Mar 10, 2010.

0
  1. #1
    I have been racking my brain on this for days.

    4/8 blogs on my server has been effected. None have the same password. Use different themes and different computers to access (completely separate users)

    I found the problem through a google alert three days ago. VPS host has been contacted twice and they claim nothing is unusual.

    Steps taken:
    Found a user registered as an admin named "feedburner". Had a strange script in the signature. Removed user. Removed all subscribers.

    Re-uploaded fresh wordpress files using overwrite via FTP.

    Changed all passwords.

    Re-wrote .htaccess which had its file permissions changed.

    Changed back file permissions that seemed to have been modified to 777

    Below are images of todays post.

    Any help or ideas greatly appreciated. Thanks
     

    Attached Files:

    akoj, Mar 10, 2010 IP
  2. adbox

    adbox Well-Known Member

    Messages:
    906
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    155
    Digital Goods:
    1
    #2
    What version wordpress are you using? Do you have any plugins installed where users can enter data? Would you list the plugins you use?
     
    adbox, Mar 11, 2010 IP
  3. Wp-Mod.Com

    Wp-Mod.Com Peon

    Messages:
    381
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Wp-Mod.Com, Mar 14, 2010 IP