BobHatcher

My sites got flagged for this too. Wordfence says “This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page”

Given that I don’t have any users other than me, I feel I’m okay.

Thanks, I was able to do that

I am definitely not an expert in this, but I’ve been having similar issues. Can you log in? Do you get the login screen? If you get the screen but are still prevented from logging in you can create a new user via editing your database. Do the procedure here: Beginner’s Guide to WordPress Database Management with phpMyAdmin (wpbeginner.com)

If you can login, update/reinstall WP from the Update menu.

If not, then update the WordPress core manually. You can do that from the command line by appending “wp-admin/update-core.php” to your URL.

I use ManageWP and have them backup my site daily. You can do a restore directly from their site as long as the login is still valid.

Thanks, I’ve been away so I couldn’t get to this until yesterday. I did James Huff’s procedure and I was able to log in and see the home page. But, when I went to any other page, I got the “Parking” page, not the intended page (see, for example thorntontaxpayers.com/town-operations/

To fix this, I had to reinstall the Divi theme. All is well now, THANK YOU.

• This reply was modified 7 months, 1 week ago by BobHatcher.

Really good points, especially the last one. I use IONOS and will check with them about logs and will change my master PW there.

Thanks, I use Wordfence on all my sites. I also use a plugin that tracks logins and activity. There were no logins other than my own. It also tracks failed logins and there were a few of those (Wordfence also notified me of those). The login viewer would tell me if a plugin was installed/deleted/modified.

Thanks everyone. I always learn something from you folks. I appreciate it.

Thanks I did switch to 2021 and it did not crash, I was able to edit a page. I’ve contacted the theme company Elegant Themes and I’ve contacted IONOS about the server logs too.

Forgive me for being naive, but are the server logs different from the error logs that I get with the debug plugin?

I installed a debug plugin and deactivated all others. The problem persists and it tells me that IT is the problem.

https://thorntontaxpayers.com/wp-content/uploads/2024/03/deleteme.jpg

• This reply was modified 8 months, 3 weeks ago by BobHatcher.

Thank you Steven, I used a plugin and it shows a mere 3.18 MB while SiteHealth still shows 100+ gig. In addition, I downloaded the entire site and it shows 4.1 gig being used. I’m very confused.

Screenshots here https://www.bobhatcherweather.com/wp-content/uploads/deleteme-1.jpg

Yeah, backups was my first thought so I cleaned them all up, but it’s still over 100 gig. I use IONOS and they don’t use cpanel, they use something else and it doesn’t give directory sizes.

Is my only recourse to download the entire site and analyze with Treefilesize or the like?

Naive question here. How do you know it’s a bot?

File this under UBD, User Brain Damage, I checked my storage on my plan and I was at the limit and that wouldn’t allow me to create anything. The reason was my backup plugin that I had set to unlimited backups rather than a specific amount.

Sorry to bother you.

Yes, the giae… is the username. I do not have self-registration enabled which is why I’m confounded and asking for help from the experts here. Here is a link to the screenshot https://plymoutharearepublicans.org/wp-content/uploads/2021/04/image_2021-04-21_164512.png

There are about 25 different logins.

Bob