Having a problem posting on my site. It’s asking me for a username and password

  • I can log into my account just fine. I can access all of the pages on the dashboard. I tried to update a post and a popup box popped up and showed me this message.

    A username and password are being requested by https://homework4dummies.com. The site says: “Magic”

    This is the first time it has ever done this. I did not put my username and or password in, because I think it might be a scheme to get my info. It will not let me update posts. It keeps popping up. I have not downloaded any new pluggins.

Viewing 4 replies - 1 through 4 (of 4 total)

  • Your site has been compromised. You’re also using a vulnerable version of WordPress.
    <meta name="generator" content="WordPress 2.6.5" />

    Some good info in this thread…

    https://www.ads-software.com/support/topic/268083?replies=5#post-1065779

    heres another more specific to that particular problem, though I really think some of the advice thats going around in there is a little weak, and too focused.

    https://www.ads-software.com/support/topic/295482?replies=46

    @ whooami:

    I’ve been following that discussion and was wondering if you know how all of this is happening?

    Someone managed to hack into the WP account and added malicious code?

    A malicious script introduced by a plugin that just auto inserts crap into WP files?

    Obviously, keeping WP installs up-to-date is a good way to head off security vulnerabilities, but if the junk got snuck in through an infected plugin or some such, then…?

    The nature of the reports is making it difficult to be sure, but I would expect it is the commnent XSS vunerability being exploited, as all the people suffering are running pre 2.8.2 versions, and a few people have been clued-in enough to remember that odd comments appeared just before the problems started.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Having a problem posting on my site. It’s asking me for a username and password’ is closed to new replies.