• Resolved Divvy

    (@divvy)


    Today I notice a mysterious field that appeared in one of my sites, and I’m very worried because I’m 100% sure that wasn’t me.

    The new field shows as dropdown with name “Select Site” as required. And there are 11 options where the first option is blank (but in the site says “Choice 16” and the other options are some domains that I have hosted in the same server.

    Is this some kind of hack? I’m using wordfence in my site and imunify360 in the server and both didn’t detect anything. Please advice!

    Screenshot: https://prnt.sc/GH7ESG36S03F

    • This topic was modified 6 months, 1 week ago by Divvy.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support brandonco

    (@brandonco)

    Hi @divvy.

    Thanks for reaching out. If you notice an unexpected dropdown field named “Select Site” in your weForms setup, it can be concerning, especially if you are sure you didn’t add it. Here are some potential causes and steps to address this issue:Potential Causes

    Plugin Conflict or Update:

      • Sometimes, a plugin update or a conflict between plugins can cause unexpected behavior or fields to appear.

      Accidental Addition:

      • It’s possible that the field was accidentally added by another user with access to the site.

      Theme or Custom Code Issue:

      • Custom code in your theme or custom functions might be inadvertently adding this field.

      Malicious Activity:

      • Although less likely if security plugins didn’t detect anything, there’s a slim chance of unauthorized changes by a hacker.

        Steps to Resolve

        Check Form Settings:

        • Go to weForms in your WordPress dashboard.
        • Edit the form where the unexpected field appears.
        • Look for the “Select Site” field and check its settings.

          Review Recent Changes:

          • Check if any recent updates or changes were made to plugins or themes.
          • Review the WordPress activity log (if you have a logging plugin) for any recent changes.

            Disable Plugins Temporarily:

            • Temporarily disable other plugins to see if the field disappears, indicating a conflict.

              Check User Access:

              • Ensure only trusted users have access to add or modify forms.
              • Review the user roles and capabilities.

                Examine Theme Files:

                • If you have custom code in your theme, review it to ensure no custom functions are adding the field.

                  Run Security Scans:

                  1. Re-run full security scans with Wordfence and Imunify360 to ensure no malicious activity is present.
                  2. Ensure your plugins, themes, and WordPress core are up to date.

                  Preventative Measures

                  Regular Backups:

                    • Ensure regular backups of your site to quickly restore if any unexpected changes occur.

                      Security Best Practices:

                      • Maintain strong passwords and use two-factor authentication (2FA).
                      • Limit admin access to trusted users only.

                        Audit Logs:

                        • Use a plugin to log and monitor changes to your site for future reference.

                        I really hope this helps. If the issue persists or you need further assistance, feel free to ask!

                        Plugin Support brandonco

                        (@brandonco)

                        Hi @divvy

                        We haven’t heard from you in a few weeks so we’re assuming you’ve manage to resolve this issue. Please don’t hesitate to reach back out if we can still offer assistance with this or if you have any other questions for us.

                        Thank you!

                      Viewing 2 replies - 1 through 2 (of 2 total)
                      • The topic ‘Mysterious Dropdown field appeared on my contact page’ is closed to new replies.