Plugin loads compromised asset

Please deactivate and delete the plugin “digital climate strike”, this should do the trick. Sometimes the code was implemented in the header oer footer.php. Have a lookm if there is code like this:

<script type=”text/javascripton
var DIGITAL_CLIMATE_STRIKE_OPTIONS …

and remove it.

Attention – the hacked code does not redirect on every site load, you may not see the infection.

This plugin has now been archived and is closed. I’d recommend anybody to disable and run their site through urlscan.io to ensure the file is removed.

Issue on GitHub:
https://github.com/fightforthefuture/digital-climate-strike-wp/issues/13

Entry in WPScan’s vulnerability DB:
https://wpscan.com/vulnerability/70ac3402-6ff7-48f5-b115-50e6b26f70de