Plugin controlled by hackers

Link shown is an example of what is being sent out, mail headers shown below.
Full plugin listing:

[ps503766]$ wp plugin list
+-------------------------------+----------+--------+----------+
| name                          | status   | update | version  |
+-------------------------------+----------+--------+----------+
| akismet                       | active   | none   | 4.1.6    |
| cloudflare                    | active   | none   | 3.4.1    |
| dreamobjects                  | active   | none   | 4.3.0    |
| faq-builder                   | inactive | none   | 0.6 Beta |
| googleanalytics               | active   | none   | 2.3.7    |
| google-universal-analytics    | active   | none   | 2.4.3    |
| jetpack                       | active   | none   | 8.6.1    |
| limit-login-attempts-reloaded | active   | none   | 2.14.0   |
| postman-smtp                  | active   | none   | 1.7.2    |
| spider-faq                    | active   | none   | 1.3.2    |
| styles                        | active   | none   | 1.2      |
| styles-twentythirteen         | active   | none   | 1.0.6    |
| tablepress                    | active   | none   | 1.11     |
| wordbooker                    | inactive | none   | 2.2.1    |
| wp-hashcash                   | inactive | none   | 4.6      |
+-------------------------------+----------+--------+----------+

• This topic was modified 4 years, 9 months ago by Jan Dembowski.