Hi websitesandbeyond,
1. Did you have the latest WordPress core version installed?
2. Are you sure attackers did not get your FTP or other server details from your email account hack?
3. Did you have any other plugin installed and you are 100% sure that none of them allowed hackers hack your site?
4. Did you analyse server logs and you are 100% sure that attackers used Aspexi Facebook Like Box Sidebox PHP file to get access to your site?
We are asking because we do our security tests internally to provide highest quality of the code, including code security.
We are quite sure that using our plugin is safe but we would really like to investigate your website to make sure that our plugin caused (or not) the issue and try to fix this ASAP.
If you could provide responses and some more details that would be awesome. You could use this forum or email [email protected].
Thank you.