chowned

Experiencing this exact same problem on our sites as well. To make it even weirder, it seems to be Chrome specific. Forms are still working for us with Firefox.

I am seeing this type of activity on one of my sites as well. The site has moved hosts 4 different times. Each time the attacker gains access all over again. I have gone as far as removing all but the main administrator and recoding the entire site. The main admin account is not called admin. I started seeing entries in my Word Fence log that showed a certain IP address was blocked. It says:

This email was sent from your website “</title>Hacked By FOXILITRIX EL<DIV style=”DISPLAY: none”><xmp>” by Wordfence plugin…

Several hours later the title was reported back normally instead. Wordfence scan is showing no problems. Nobody fixed the title between the times. What is going on here?

One last note: Foxilitrix El has a series of YouTube videos that show him exploiting WordPress. The videos are not very coherent and whatever he is typing in some of the videos appears to be in Arabic or some other language like that.

Contact Form 7 always fails to load the proper code from Google to make the actual captcha show.

In the WordPress admin, go to Avada -> Theme Options -> Advanced -> Code Fields. In the Space before </body> field enter:

<script src=”https://www.google.com/recaptcha/api.js&#8221; async defer></script>

Then save your changes. This should make your captchas show up.