Frustrate from Hack Again and Again… :(

  • Hi everyone
    i have some issue with wordpress i don’t why my all wordpress websites are hack even after apply securities and plugins i use .htaccess securities, generate Custom Secret Keys, Disable Theme Editor Option, limited file access in wp-content folder, protected admin are but nothing work for me.

    After applying all securities i thought problem is in my hosting company, i shift my reseller to leading hosting company but today i again hack.. ?? don’t know where is the loop hole. i have hack problem only with wordpress nothing wrong with custom coding site or shopping cart. please help if nothing work. i have to learn and shift to another cms software.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator Marius L. J.

    (@clorith)

    Hi,

    Unwanted users usually come in through a theme or plugin, have you checked what plugins and themes you are using, looked for possible updates to these and even re-installed them all with a fresh copy (just fixing the modified content doesn’t help if the backdoor is left).

    Also have you looked into services like Sucuri that have an audit option, and a plugin to check your site? (There are others, but that’s the one I’ve used previously)

    Moderator bcworkz

    (@bcworkz)

    Besides the attack vectors Marius mentions, don’t forget plugins and themes that are on your server but unused, such as an old staging site, or even unused plugins or themes on your main site. In some cases it’s possible for hackers to leverage vulnerable code even when not activated on the site.

    Also don’t overlook any local computers and networks used to access the site. Malware on such resources can be used to gain access to your site. Ensure such resources are free of malware, and if possible, always use HTTPS to connect to your site’s admin area. (Many WP sites do not have HTTPS enabled, which is a shame)

    I’d be extremely surprised if any part of WP core turned out to be vulnerable. It just doesn’t happen these days.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Frustrate from Hack Again and Again… :(’ is closed to new replies.