My WordPress Website is being Hacked..

I’m sorry to confirm it but your site is well and truly compromised. There’s no shortcut to delousing it, it’s a lot of work ahead of you.

You need to start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

https://blog.sucuri.net/2010/07/understanding-and-cleaning-the-pharma-hack-on-wordpress.html

Hi Sir,

I think the hackers caught some loophole on the WP-Comment to hack my website.

Because I’ve found those illegal codes are located in the table

“wp_commentmeta”

I just upgraded my wordpress to WP3.9.
I don’t know when the hackers hacked my website, maybe in the previous versions.

I first found this issue when I search my website on the Google, real hate .

Because I’ve found those illegal codes are located in the table
“wp_commentmeta”

That doesn’t mean that the plugin was the vector for the hackers. Only that they changed something in this table – an easy thing to do if you have gained server access. You now need to completely de-louse the site using the links posted above.

That doesn’t mean that the plugin was the vector for the hackers. Only that they changed something in this table – an easy thing to do if you have gained server access. You now need to completely de-louse the site using the links posted above.

I need to check more in the “wp-commentmeta”. Until present, I’m only able to find those illegal codes that are located in the plugin.

When I use “The Viagra Canada hacked” to search on the Google, I see that I’m not the only victim.

When I use “The Viagra Canada hacked” to search on the Google, I see that I’m not the only victim.

A large number of hacked sites doesn’t mean that WordPress has a problem. It does mean that many people run their sites insecurely or on insecure hosts.

Give those links a read. They really can educate you to lock down and clean out your installation.

Hi Everyone,

Let me share a bit more about this “Viagra” hack..

I’ve checked all of my website files and databases, later I found there was a hacking file “wp-main.php” which was created by hackers in my website root.

And the hacker had modified my “.htaccess” file, so I advise everyone should change this important file to read only.

In the MySQL database, I found there were some hacking scripts located in “wp_commentmeta”. I’ve done a bit more investigation on the Internet, some of the victims said that it might be the issue with Akismet. I don’t know whether it’s true.