10jili COM Download apk latest version.REGISTER NOW GET FREE 888 PESOS REWARDS!

Resolved hotconductor
(@hotconductor)

11 years, 7 months ago

It was my understanding that CF7 could be used only as inbound mail. IE: someone on the site fills out the form, it goes to my designated email. However, I have gotten back a massive log from my host (hostgator) which clearly shows that CF7 on one of my sites is being exploited to send OUTBOUND mail. So my sites have all been flagged for spam, despite the fact that all are local personal businesses. Any thoughts on how to secure this?

https://www.ads-software.com/extend/plugins/contact-form-7/

Viewing 5 replies - 1 through 5 (of 5 total)

esmi
(@esmi)

11 years, 7 months ago

I’m sorry but that sounds as if your site has been hacked. ??

I would strongly recommend that you start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Anything less will probably result in the hacker walking straight back into your site again.

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Thread Starter hotconductor
(@hotconductor)

11 years, 7 months ago

Actually I apologize… The only site where there seems to be a problem is the only site where Visual Form Builder Pro is used as the contact form. All sites with CF7 are fine n dandy. No log issues.

I do not believe the site has been hacked, but I definitely think there is a big hole in VFBP!

esmi
(@esmi)

11 years, 7 months ago

I can only suggest that you try to contact the developers of VFBP asap.

Thread Starter hotconductor
(@hotconductor)

11 years, 7 months ago

Already have. And have switched out that plugin while they bug hunt.

esmi
(@esmi)

11 years, 7 months ago

I’d actually suggest that you uninstall it for now. An insecure, inactive, plugin can still, theoretically, pose a security issue.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Contact Form 7 – Used to send spam’ is closed to new replies.

Tags