harbours

It looks like it was a vulnerability in Essential Addons for Elementor.

Thank you so much for walking me through all this! I appreciate your help!

Thank you for your reply.

I looked for “POST” entries in the logs prior to the password change email and besides what I think is the automated chron job (same IP requests to wp-chron.php on an hourly basis), I found over 20 entries similar to this the day before it happened:

IP#1 myurl.com – [13/May/2023:21:35:51 +0000] “POST /wp-login.php HTTP/1.1” 200 124 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:96.0) Gecko/20100101 Firefox/96” | TLSv1.2 | – – 0.052 – 0 NC:010000 UP:-DT

The IP addresses change with each attempt but they’re probably VPNs since they’re from all over the world.

The only other POST entry that stands out is:

IP#2 myurl.com – [10/May/2023:09:01:50 +0000] “POST /wp-content/plugins/wordpresss3cll-2/about.php?fuck=you HTTP/1.1” 200 160 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0” | – | – – 0.000 – 0 NC:000000 UP:-DT

I’m 99% sure that the password couldn’t have been compromised on our end so I’m trying to figure out how it happened so I can prevent it from happening again.

Thank you for your help!

Just an update for everyone else having this issue: a user in another thread seems to have figured out the problem.

A temporary fix for those on Siteground: Go to HTTPS Enforce and disable External Links Rewrite. The Elementor editor should load now. You can always go back and enable it again once you’re done editing.

I still don’t understand why this suddenly broke Elementor since it’s been working fine with External Links Rewrite enabled all this time but hopefully the devs will address it soon.

• This reply was modified 5 years, 7 months ago by harbours.
• This reply was modified 5 years, 7 months ago by harbours.

Thanks for the reply @cavalierlife. I’ve tried those suggestions. Would it be possible to troubleshoot if I block out my domain name? It’s only Elementor that doesn’t work; the site itself loads fine and editing the normal way works fine. As I mentioned before, Elementor was working last night but when I tried to work on it today it wouldn’t load.

This is the System Info log, with my domain name replaced with **domain**:

== Server Environment ==
	Operating System: Linux
	Software: Apache
	MySQL version: Source distribution v5.7.26-29
	PHP Version: 7.1.30
	PHP Max Input Vars: 3000
	PHP Max Post Size: 128M
	GD Installed: Yes
	ZIP Installed: Yes
	Write Permissions: All right
	Elementor Library: Connected

== WordPress Environment ==
	Version: 5.2.2
	Site URL: **domain**/test
	Home URL: **domain**/test
	WP Multisite: No
	Max Upload Size: 128 MB
	Memory limit: 768M
	Permalink Structure: Plain
	Language: en-US
	Timezone: 0
	Debug Mode: Inactive

== Theme ==
	Name: Twenty Nineteen
	Version: 1.4
	Author: the WordPress team
	Child Theme: No

== User ==
	Role: administrator
	WP Profile lang: en_US
	User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:64.0) Gecko/20100101 Firefox/64.0

== Active Plugins ==
	Elementor
		Version: 2.6.8
		Author: Elementor.com

== Log ==
	: 
JS: showing 1 of 1JS: 2019-08-12 21:03:54 [error X 1][https://**domain**/test/wp-content/plugins/elementor/assets/js/editor.min.js?ver=2.6.8:32:0] An attempt was made to create or change an object in a way which is incorrect with regard to namespaces 

And this is the error log from the console:

NamespaceError: An attempt was made to create or change an object in a way which is incorrect with regard to namespaces editor.min.js:32

?_createSVGPreset https://**domain**/test/wp-content/plugins/elementor/assets/js/editor.min.js?ver=2.6.8:32
    getPresetSVG https://**domain**/test/wp-content/plugins/elementor/assets/js/editor.min.js?ver=2.6.8:32
    Backbone 9
    render self-hosted:1001
    onRender https://**domain**/test/wp-content/plugins/elementor/assets/js/editor.min.js?ver=2.6.8:32
    Backbone 3
    render self-hosted:1001
    Backbone 2
    onPreviewLoaded https://**domain**/test/wp-content/plugins/elementor/assets/js/editor.min.js?ver=2.6.8:7
    onPreviewLoaded self-hosted:1003
    Backbone 2