Email without subject notification

Yes! And some with php attachments – which of course we do not open!

Haven’t figured out how and why but wonder if there is a vulnerability somewhere that someone has found.

Would be very interested to know if anyone has any ideas on this and will certainly post here if I come across any answers myself.

Hello,
same problem here and everything is updated.

We have the suspect that there’s some kind of vulnerability on Contact Form 7 (which is updated at version 4.3).

Logs show that before the .php arrives, there’s a POST method in the root on the website.

Keep us updated.

Unfortunately no news from me except that we don’t use Contact Form 7, therefore possibly not the culprit. I’ve also been away from the office for a while so haven’t had a chance to look in to this any further at all. Will definitely update if I come across any potential answers.

Hi,
Is this topic regarding Jigoshop issue? If the email issue is related to Jigoshop try to generate default email from Jigoshop general settings.
Jigoshop -> General – “Generate Defaults”.

We will mark this topic as resolved, if there will be any updates please let us know.

I tried to Generate the default emails and it did not resolve the issue. I get about 20 of these emails per day.

My apologies, I did not see the thread was under Jigoshop. I just saw the issue was the same as what I have been experiencing. So must be a vulnerability in WordPress itself???

We are looking to do a huge upgrade soon, so hopefully this issue will be resolved after that.

Glad I’m not getting 20 of these emails per day though!!!

Hello,
we have found the possible source of the problem.

Take a look here: https://www.skepticism.us/2015/09/attacker-attempts-to-install-minimalist-backdoor-via-post-license-php/

Bye!

BTW it’s not Jigoshop related.

Thanks for letting us know. We appreciate it