files removed URGENT

  • Resolved wpsupportacto

    (@wpsupportacto)


    1 year, 4 months ago

    We have a directory with 400 active members and we hold certain documents with information for each member, they upload this through a form on the website. Since this morning all the files have dissapeared. And instead it says THIS FILE HAS BEEN REMOVED. It is vital for us to have this information back, do you have any idea what happened and how we can get this restored?

Viewing 7 replies - 1 through 7 (of 7 total)
  • Thread Starter wpsupportacto

    (@wpsupportacto)

    I have just seen that all the profile photos are gone as well. It has been five hours since I submitted this. The customer is very frantic as this is a critical element of their website and people are starting to notice.

    @wpsupportacto

    If you have an UM version prior to UM 2.6.7 read this document

    Security Incident Update and Recommended Actions

    Do you have a backup of your site to restore?
    Ask your web hosting about their backups for a restore of your site.

    Thread Starter wpsupportacto

    (@wpsupportacto)

    yes we have the newest version of the plugin. We would like to know how this could have happened. So far we have not been able to find the data in the backups either. I backup every day and then keep two so there is a large chance the backups we have are corrupted as well.

    @wpsupportacto

    Ask your Web Hosting support about how they make backups
    and for how long time they keep the backups.

    Have you got any new unknown admin users at your site before updating to UM 2.6.7?
    Try to use the “Scanner” in UM Settings -> Secure.

    Thread Starter wpsupportacto

    (@wpsupportacto)

    hi, I have asked my hosting company about it this morning, backups. Yes we did find unkown users last friday. We went through all the information you have about this and did not find any users with admin capabilities or any compromised files at all. We removed those users and I did the scanner and that came out as ok as well. So it is really weird that this still happened.

    Plugin Author Mykyta Synelnikov

    (@nsinelnikov)

    Hi @wpsupportacto

    Thanks for letting us know about this issue on your site. We don’t have any scripts inside the plugin for flushing the Ultimate Member uploads folder. Please keep us updated. I hope you will not be faced with the same again and great that you have backups.

    Please set up security scanner plugins like Wordfence, activate Ultimate Member > Settings > Secure > Administrative capabilities and I hope this helps you to keep your WordPress installation secure.

    Best Regards!

    Plugin Support andrewshu

    (@andrewshu)

    Hi @wpsupportacto

    This thread has been inactive for a while so we’re going to go ahead and mark it Resolved.

    Please feel free to re-open this thread if any other questions come up and we’d be happy to help. ??

    Regards

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘files removed URGENT’ is closed to new replies.