Hacked – Removed Plugin – Site Still Redirecting

  • Resolved rpdoty

    (@rpdoty)


    5 years, 3 months ago

    The site was hacked. I removed the bad redirect entries and then deleted the plugin but it’s still redirecting. How can I remove this redirection?

    Thanks.

Viewing 4 replies - 1 through 4 (of 4 total)

  • You have to clear your history to remove the redirect on your local computer. To test try using a browser in incognito mode.

    Thread Starter rpdoty

    (@rpdoty)

    That worked. Thanks for the reply.

    Plugin Contributor Scott Nelle

    (@scottnelle)

    I believe it is actually the Simple 301 Redirects Bulk Uploader add-on that is the problem. Do you have that installed? The author updated it on August 8th to patch a serious security issue. If you have it installed, you should immediately update it to version 1.2.5 https://www.ads-software.com/plugins/simple-301-redirects-addon-bulk-uploader/

    Turning off my plugin is also an effective way to undo this, of course.

    I found this in my site referrer logs:

    xxxxxxxxxx.com/wp-content/plugins/simple-301-redirects-addon-bulk-uploader/assets/css/notices.css

    coming from 2 different countries.

    I don’t use the bulk uploader addon. And the URL they used was a subdomain address to a specific page.

    Is this bulk uploader addon subject to hacking?

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Hacked – Removed Plugin – Site Still Redirecting’ is closed to new replies.