Hi @snaushads,
I’m sorry about the confusion here.
There’s no connection between WPCode and the plugin you mentioned “header-and-footer-scripts”.
WPCode was previously called “Insert Headers and Footers” and when we rebranded the plugin to WPCode we expanded the plugin to add a lot of new features like full code snippets support with conditional logic, automatic insert locations and more.
Unfortunately, from what you are describing with the plugin not showing up in the list of plugins your site credentials may have been compromised and a malicious snippet may have been installed using WPCode to add unwanted scripts on your site.
From all the cases we encountered before with this issue, the way the attackers get in is through compromised credentials so I recommend that you immediately take these steps to resolve this issue:
– Immediately update passwords for all administrator accounts on your website, in all the cases we encountered so far the attackers accessed the website with compromised credentials. Please make sure that you do not use the same username/password combination on other websites.
– Review the list of Administrator users and remove any users that you do not recognise – in some versions of this attack the snippet added creates a new administrator account.
– Use the WPCode Safe Mode to prevent the snippet from being executed by adding ?wpcode-safe-mode=1 to your wp-admin URL, for example:?https://example.com/wp-admin?wpcode-safe-mode=1
– Once in safe mode, go to the Code Snippets menu and delete any snippets you do not recognise.
– If you did not use WPCode previously, go to wp-admin > Code Snippets > Settings > enable the option to delete all the plugin data, save and then from the Plugins page deactivate WPCode and delete the plugin. This will ensure that all the data added through WPCode is deleted.
If this is the case, I’m sorry you ran into this issue, unfortunately some bad actors are using WPCode once they get access to websites to add unwanted snippets and we can’t prevent that since the attack happens before WPCode is installed.
If you wish to continue using WPCode, yes, the plugin is actively maintained and once your credentials are updated you won’t have any issues moving forward.
Let me know if I can provide any additional info.
