Download Page hacked

When we created the page via the simple download manager and noticed after 3 days we noticed that the plugin was hacked by a Bangladeshi hacker.

Your plugin is vulnerability to hacker.

That doesn’t indicate that the plugin is at fault but it does mean your site is vulnerable and you need to address that.

Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

We checked all our pages and no other pages are infected, except the pages created via this plugin.

So how can the site be vulnerable.

You may be fine, we don’t know what vulnerability was leveraged. If someone gained write access to your server through this vulnerability, they could have installed hidden back door code anywhere on your server. Hackers are very clever at hiding code, it can be very difficult to find. The only way to be sure your site is completely clean is to follow the advice on Jan’s links.

If you feel confident this did not happen and you like to live dangerously, then so be it. Your site, your choice.

Also, ask your hosting provider to analyze logs and activities on the server to see if they can give you more info on the hack.