WARNING - Major attacks on Wordpress sites

[Admin]

If you do have lots of sites then you might want to check out www.managewp.com. It's pricey but makes managing updates of everything real easy and quick.

I've got 400 wordpress installations being managed on it.

Cheers
Stephen.

Wow what a tool! Not cheap as you say but to manage multiple WP sites this is such a time saver. I thought I had a mostly standard set of plug-ins across my sites, how wrong I was! and adding / activating them with this tool is such a synch.

I'm tempted to sign up

Thanks for sharing

Admin

 

[stender]

Just a note to watch out, I installed a plug named "Ultimate Security Checker" to toughen up a wordpress install, about a week later the site had malware, have just cleaned the site and found (I think) that the security plugin contained malware (or at least became infected), here is the clean up report:

"Site is now clean and malware-free. The following files were compromised and fixed:

CLEARED: Cleared malware from file: ./wp-content/plugins/ultimate-security-checker/securitycheck.class.php"

Hope that helps!

Cheers

I have that plugin intalled and so far no issues. What did the exploit do? how did you find you had a problem?

 

[steww]

I have that plugin intalled and so far no issues. What did the exploit do? how did you find you had a problem?

Yep its strange, I had pages with base64 malware code appearing in their headers (in source code). I couldn't find any corrupt files, and hosting supplier scanned everything - and came up clear. But the base64 was still there, in the end I got Sucuri to scan and repair it, that's the report they gave me and all looks fine now.

 

[FutureDomain]

Would recommend installing the Ultimate Security and Bulletproof Security plugins along with Block Bad Queries.

Hi Everyone

Looks like one of my servers has been targeted again, they even got past Bulletproof Security, did work fine for a while though Blossom.

Anyone using something with a little more power, even a premium paid pluggin that does a better job would be good?

We are doing a lot more HTML and custom PHP now becasue of these pointless attacks.