Got hacked because of plugin

Dear @audune

I sincerely apologize for the distressing experience you encountered due to the security breach. We sincerely regret any inconvenience, frustration, and loss of time you have endured while resolving the aftermath.

To address the situation and prevent further compromise, I recommend the following steps:

1. First and foremost, check if you have any backups of your affected sites. If you do, it is crucial to restore the websites using those backups to ensure they are in a secure state. This will help eliminate any malicious code or unauthorized access.
   
2. Ensure that you are using the latest versions of all plugins installed on your websites, especially Essential Addons for Elementor. Our most recent update, version 5.7.2, includes security enhancements and fixes for vulnerabilities.
   
3. In case you don’t have a backup available, please follow these steps: Access your website’s file system and navigate to the “wp-content/plugins” directory. Locate and delete any unrecognized folder similar like- “posts-layouts” plugin and others like this. By removing those folders entirely, you can eliminate the potential entry point for hackers.
   
4. After removing the plugin, it is crucial to update your WordPress core to the latest version. This will ensure that you have the most recent security patches and improvements, further strengthening your website’s defense against potential attacks.
   
5. You can also contact your hosting provider if you need any help accessing the site or the file directory of your site.
   
6. Additionally, I recommend reviewing your themes and deleting any unused ones. If you have active themes, make sure they are updated to their latest versions. Outdated themes can pose security risks, so keeping them up to date is essential for maintaining a secure website.

I understand that cleaning up after a security breach is time-consuming. If you have any further questions or concerns, please don’t hesitate to reach out to us. We value your feedback and are committed to helping you secure your websites effectively.

• This reply was modified 1 year, 6 months ago by Pial.

Hello @audune i had the same problem with my site, how do you fix it? I have a backup of the site from April, is it enough restore the site using those backup? Do you have any reccomandation?

Hello @maimone1983 ,

We again sincerely apologize for the distressing experience you encountered due to the security breach. As we have already mentioned Our most recent update Essential Addons for Elementor?version 5.7.2, includes security enhancements and fixes for vulnerabilities.

If you have a Backup of your site, just restore the site and then Ensure that you are using the latest versions of all plugins installed on your websites, especially Essential Addons for Elementor. Our most recent update,?version 5.7.2, includes security enhancements and fixes for vulnerabilities

Additionally, I recommend reviewing your themes and deleting any unused ones. If you have active themes, make sure they are updated to their latest versions. Outdated themes can pose security risks, so keeping them up to date is essential for maintaining a secure website.

If you have any further questions or concerns, please don’t hesitate to reach out to us.

Thanks