How do spammers/hackers insert comments into my database?

  • Daily I get multiple spam comments on my pages & posts. The comments don’t display since I have all comments disabled in WP but they still get inserted. My security measures:

    1. Recently changed admin user name and password.
    2. Recently changed database passwords
    3. set proper permissions on files and folders
    4. installed Wordfence and run daily scans. Yes, wordfence finds new files such as stats.php and modifies existing files. I fix all this as soon as I discover it.
    5. All plugins (including akismet) are up to date.

    I am on a shared hosting plan with A Small Orange.

    Suggestions?

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘How do spammers/hackers insert comments into my database?’ is closed to new replies.

Tags