Possible hack in WP 4.1

  • Resolved muirgen

    (@muirgen)


    10 years, 1 month ago

    We pushed a new site up a couple weeks ago and I just started seeing some strange redirects going on. Talked with my hosting provider and the techs there were stumped too.

    Occasionally, there will be a redirect from a given page such as example.com to example.com/TPnjZ. Other variations of this 5-string redirect path occur as well, such as /XeacZ. In google webmaster tools when I “fetch as google” I see a bunch of these redirects returned.

    There is nothing suspicious in the .htaccess file. A permissions check for universal write and a compromise scan both returned clean.

    Anyone know what might be going on? I think the next step is to start isolating plugins, but are there better ways to discover the problem? Anyone seen this before?

    Many thanks

Viewing 4 replies - 16 through 19 (of 19 total)
  • Moderator James Huff

    (@macmanx)

    Ok, and just to be sure, you saw the same problem with *all* plugins deactivated? I’d be rich if I had just $5 for every time it was the one “must use” plugin which was never deactivated.

    If so, what is the content of your .htaccess file?

    Thread Starter muirgen

    (@muirgen)

    I just cleared the cache under my WP Super Cache plugin and the problem appears to be resolved! I have not seen the 302 redirect the last 10 submissions under “Fetch as Google” in the webmaster tools and in another online redirect tester.

    For the record, I had indeed turned off ALL the plugins previously and the .htaccess file is clean. No hidden code anywhere and no suspicious mods.

    I will continue checking on this issue and will report back if the problem re-appears. It seems likely to me that the cache issue will reassert itself if I continue using the Super Cache plugin.

    A big thank you to you, James, as well as wslade, for all the help. Truly amazing.

    Thread Starter muirgen

    (@muirgen)

    BTW, James..just checked out your website..I was just in Cairns a month ago myself. You didn’t swim in the lagoon, did you?? ??

    Moderator James Huff

    (@macmanx)

    Excellent, I’m glad it was just in the cache! ??

    Swam at the reef, but no lagoons.

Viewing 4 replies - 16 through 19 (of 19 total)
  • The topic ‘Possible hack in WP 4.1’ is closed to new replies.