MoghillPat

Great! Thanks for that. I have sites on Heart too and hit the same problem – error receiving data from the peer.

All I had to do was add the line: define(‘ALTERNATE_WP_CRON’, true); to wpconfig and it now works, thanks to your suggestion. I didn’t need to do anything else to get it to work.

And it’s very good at that!

Oh yes – using WooCommerce 2.1.5 and Woo For the Cause theme

Upload it to WordPress – now there’s a thought.

They are trying to push everyone onto WorldPay now

@forest Skills – if you ring the number I posted you get straight through to the developers and they will email you the latest version.

2.0 is for Woo-Commerce 2.0 compatibility, so 2.1 may work.

I believe so, though once installed it says 2.2 in the plugin display in wp admin

Cardsave have issued a new version of the plugin. Speak to their support desk on 01472 263595 and they will send you the new version.

And it works, by the way.

Just done an update on a site using Cardsave and from checkout it now goes to a 404 – is this the same problem you’re getting?

Am on the phone to Cardsave right now trying to sort it.

Just encountered this issue for the first time also – html in sitemap files, even though there were no errors on testing the sitemap.

However, when I came back into webmaster tools a few minutes later the sitemap was fine – no errors reported.

So I’m thinking this is a Google issue, not a Yoast issue, and it resolves itself quickly. So I would wait and see, then have another look it Webmaster Tools – it may just (somehow) fix itself.

Fair enough, I guess. Just trying to prevent others from getting infected.

However, I have seen dozens and dozens of these spam emails now, and all used wplite to store the infected files.

Thanks for the links though. Interesting reading ??

My site wasn’t exploited as I wouldn’t use a plug in that was this out of date.

I know of an infected site that is using 3.8, so it presumably works, and of the current load of spam I am getting (which includes links into typo3 sites and asp.net sites), ALL of the WordPress sites have links in the wplite folder.

I checked the known site on sucuri sitecheck.

I’m trying to help others here, and not myself. None of my sites are infected.

However there are site owners using this plug in who clearly need help, never mind those who follow the links in the spam emails and get infected by the malware.

Since the plug in has not been updated in such a long time and is at least suspected (if not the back door) in infecting WordPress sites would it not make sense to remove it from the directory anyway? It may stop people who don’t bother to read the out of date notice opening their sites up to infection.

I agree. I’m also getting this spam and warning site owners where I can.

The hack seems to place four php files in the /wp_lite/ folder and these are being used to distribute malware.

Is there anywhere we can report these compromised plugins?

I was indeed trying to do an ‘upgrade network’, jkhongusc. Sounds like you may have the cause.

I’m not using an https plug in and no time now to post them all as I’m going away for the holidays.

Since this is happening on three sites across different servers with the same host, I’m going to put a support ticket with them and refer them to the useful troubleshooting info on here.

I’ll report back, post a solution and close the ticket when I get one in case anyone else has this problem.

Thanks for your help, both of you.

Only using two WooThemes, Canvas and the One Pager.

I’ll ask my hosting company as I’m pretty sure I don’t have direct access to them.

I installed another MultiSite today, using 3.8, and I just had a look in there. Even though I only have the root site set up and no sub sites, it just gave me the same error message , except this time it says it’s the main site.

Yet this site is running 3.8. I think it’s a bug.