Website hacked despite Wordfence

Your title is slightly misleading if Wordfence has been installed after your website has been compromised.

Your are running WP 4.9.8 which is vulnerable and also Woocommerce 3.4.5 which is also vulnerable… an easy prey for anyone who wants to exploits the site.

Google is your friend “how to clean you hacked wordpress website” or you can use a professional service to clean.

I would start by making sure all versions of the plugins and the core are up to date and not vulnerable. (a quick scan showed that most of your plugins are out of date)

hello @divemasterza,

Thanks for your inputs, i have upgraded my wordpress uptodate 5.1.1 and all plugins upto date…

I guess you are from Wordfence family… though i am waiting for a official input from wordfence on this issue…

I am not from Wordfence family.
I just wanted to point out the Wordfence is more of a ‘Preventive Vaccine’ not a ‘Serum’ ??

Hey @shyamdussa,

( @divemasterza, thanks for sharing your great advice. )

I’m sorry to hear that you’ve run into this, I understand how frustrating it can be.

Do you have a backup to restore from? I’d suggest updating all credentials including WordPress, (s)FTP, database and hosting control panel. The article below will share more in depth how to recover from a compromise. If you’re still experiencing the issue after following all of the steps I’d suggest reaching out to a professional hack repair service to clean the site and patch the point on entry.

https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/

Thanks,

Gerroald

• This reply was modified 5 years, 7 months ago by WFGerroald.