Answer by kristina childs for How did they hack my Wordpress sites
This question is really old, but since I've been recently dealing with the same type of attack, here are some very basic things you can do:Edit your php.ini file to disallow base64_decode...
View ArticleAnswer by John Gardeniers for How did they hack my Wordpress sites
Welcome to reality. Your sites got hacked because you completely failed to take any precautions. Running such old and vulnerable versions of WordPress is simply asking for this to happen. Given the...
View ArticleAnswer by Mark McKinstry for How did they hack my Wordpress sites
Unless you have the logs from the day it happened, there's probably no way you're going to know how it happened. There's tons of exploits against historical versions of wordpress like 2.5. Here's a few...
View ArticleAnswer by Peter Rowell for How did they hack my Wordpress sites
Alex, unless you're a full-time security person, doing forensics on stuff like this is a waste of your time. Running WP 2.5, which is 3 years old, is just asking to be pwned.A few simple rules:Be very...
View ArticleAnswer by markratledge for How did they hack my Wordpress sites
See FAQ: My site was hacked « WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress « WordPress Codex
View ArticleAnswer by JohnP for How did they hack my Wordpress sites
That's your problem right there. Most of these attacks are carried out by automated scripts that look for known vulnerabilities in older wordpress systems. Since anyone can look at bug reports and...
View ArticleHow did they hack my Wordpress sites
I have many wordpress sites hosted in a Bluehost shared hosting environment. Recently when I searched one of the sites in Google, it said "The site might be compromised". I got alerts from Google...
View Article