Blog Hacked with Spam Adverts

I can see this spam content in the source code as well, yet I ran your site though the scanner (https://sitecheck.sucuri.net/results/lotusmedicalinternational.com/blog/) and they say it’s clean.

Looks like your theme is infected. I would download it and go through every file. Start with the header.php, it looks like that’s where they have injected the code. If you don’t have time to do this, go and grab a fresh copy of the theme and just replace it.

You may also want to update your theme. The one you are using is pretty outdated.

I would also change all of your passwords.

Here’s some more info about hacked sites and what to do:

https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Hi Christine

Thank you so much for all your help and advice, I really didn’t know where to start as I’d checked all the php files in my main folder but didnt think about checking the theme.

I found the malicious code in the php header for the theme as you suggested. I have removed the coed but I will also replace the theme, I didn’t realise it was so old.

Once again thank for your guidance and support.

Best wishes,
Cathal