[HELP] Why My WordPress Site Getting Redirection Ads

Genie

Member
May 30, 2020
86
30
18
hi i faced this same issue in last month. may I know the theme you used in this site?

and check the plugin named "mplugin.php" in your plugins folder. through cpanel*.

and here I reposted a comment related to the issue.

""""""""""""""""
Jnews and greenmart theme has some infected files in past. last month my websites too hacked and adverts are injected anonymously.

I've checked the plugins folder for issues. there I found a plugin called "mplugin.php". this plugin is invisible on the admin panel. it automatically inserts some ad codes and the ad codes won't run on the admin's IP address. random new users only can get those irritating malicious ad popups. once we try to do anything on our site. this plugin is changing admin passwords and sometimes it totally breaks the sites. so I decided to run backup and deleted the plugin.

the downloadfreethemes website has most of the infected theme files with them. so I personally recommend to please run a malware scan each and every time while you installing new nulled plugins or themes.

and the Mentioned themes are not working properly even if we used untouched files.

the mentioned malicious plugin is common nowadays. try to secure your site by running regular backups. sometimes we don't have a way to find the issue with these plugins. so be aware and secure your sites.""""""""""""""""""
 
Last edited:
  • Like
Reactions: Nulzzosa

vijay1

Well-known member
Trusted Uploader
Apr 25, 2020
251
307
63
32
IN
hi i faced this same issue in last month. may I know the theme you used in this site?

and check the plugin named "mplugin.php" in your plugins folder. through cpanel*.

and here I reposted a comment related to the issue.

""""""""""""""""
Jnews and greenmart theme has some infected files in past. last month my websites too hacked and adverts are injected anonymously.

I've checked the plugins folder for issues. there I found a plugin called "mplugin.php". this plugin is invisible on the admin panel. it automatically inserts some ad codes and the ad codes won't run on the admin's IP address. random new users only can get those irritating malicious ad popups. once we try to do anything on our site. this plugin is changing admin passwords and sometimes it totally breaks the sites. so I decided to run backup and deleted the plugin.

the downloadfreethemes website has most of the infected theme files with them. so I personally recommend to please run a malware scan each and every time while you installing new nulled plugins or themes.

and the Mentioned themes are not working properly even if we used untouched files.

the mentioned malicious plugin is common nowadays. try to secure your site by running regular backups. sometimes we don't have a way to find the issue with these plugins. so be aware and secure your sites.""""""""""""""""""
Sites providing infected plugins and themes

Vestathemes , downloadfreethemes do add more to be safe
 
  • Like
Reactions: Genie

Hemanth

New member
Jun 27, 2020
10
2
3
tradingtalks.org
hi i faced this same issue in last month. may I know the theme you used in this site?

and check the plugin named "mplugin.php" in your plugins folder. through cpanel*.

and here I reposted a comment related to the issue.

""""""""""""""""
Jnews and greenmart theme has some infected files in past. last month my websites too hacked and adverts are injected anonymously.

I've checked the plugins folder for issues. there I found a plugin called "mplugin.php". this plugin is invisible on the admin panel. it automatically inserts some ad codes and the ad codes won't run on the admin's IP address. random new users only can get those irritating malicious ad popups. once we try to do anything on our site. this plugin is changing admin passwords and sometimes it totally breaks the sites. so I decided to run backup and deleted the plugin.

the downloadfreethemes website has most of the infected theme files with them. so I personally recommend to please run a malware scan each and every time while you installing new nulled plugins or themes.

and the Mentioned themes are not working properly even if we used untouched files.

the mentioned malicious plugin is common nowadays. try to secure your site by running regular backups. sometimes we don't have a way to find the issue with these plugins. so be aware and secure your sites.""""""""""""""""""
I used Publisher Theme
 
  • Like
Reactions: Genie

Shahbaaz

New member
Dec 6, 2020
0
-3
1
hi i faced this same issue in last month. may I know the theme you used in this site?

and check the plugin named "mplugin.php" in your plugins folder. through cpanel*.

and here I reposted a comment related to the issue.

""""""""""""""""
Jnews and greenmart theme has some infected files in past. last month my websites too hacked and adverts are injected anonymously.

I've checked the plugins folder for issues. there I found a plugin called "mplugin.php". this plugin is invisible on the admin panel. it automatically inserts some ad codes and the ad codes won't run on the admin's IP address. random new users only can get those irritating malicious ad popups. once we try to do anything on our site. this plugin is changing admin passwords and sometimes it totally breaks the sites. so I decided to run backup and deleted the plugin.

the downloadfreethemes website has most of the infected theme files with them. so I personally recommend to please run a malware scan each and every time while you installing new nulled plugins or themes.

and the Mentioned themes are not working properly even if we used untouched files.

the mentioned malicious plugin is common nowadays. try to secure your site by running regular backups. sometimes we don't have a way to find the issue with these plugins. so be aware and secure your sites.""""""""""""""""""
use wordfance plugin its super malware remover
 

Genie

Member
May 30, 2020
86
30
18
I used Publisher Theme
fine try to downgrade the theme version. use old version of this theme. then enable wordfence plugin. after that try to upgrade the theme files version by version. NOTE: try to scan everytime while upgrading theme files using wordfence.

and don't forget to change the current database password and admin password. Don't reuse your old passwords again on that particular site.
 

Pranav

New member
Feb 20, 2019
20
2
3
If there's suspicious activity on your sites, then either Sucuri Security or Wordfence Security plugin can be useful to get rid of Malware and also show you the activity auditing as well. Else, you may alternatively try switching to a suitable theme that provides clean code and trusted plugins.
 

amanrahh

New member
Sep 17, 2020
25
2
3
India
www.stealprice.online
hi i faced this same issue in last month. may I know the theme you used in this site?

and check the plugin named "mplugin.php" in your plugins folder. through cpanel*.

and here I reposted a comment related to the issue.

""""""""""""""""
Jnews and greenmart theme has some infected files in past. last month my websites too hacked and adverts are injected anonymously.

I've checked the plugins folder for issues. there I found a plugin called "mplugin.php". this plugin is invisible on the admin panel. it automatically inserts some ad codes and the ad codes won't run on the admin's IP address. random new users only can get those irritating malicious ad popups. once we try to do anything on our site. this plugin is changing admin passwords and sometimes it totally breaks the sites. so I decided to run backup and deleted the plugin.

the downloadfreethemes website has most of the infected theme files with them. so I personally recommend to please run a malware scan each and every time while you installing new nulled plugins or themes.

and the Mentioned themes are not working properly even if we used untouched files.

the mentioned malicious plugin is common nowadays. try to secure your site by running regular backups. sometimes we don't have a way to find the issue with these plugins. so be aware and secure your sites.""""""""""""""""""
Right, I used jnews earlier and i got infected by loop ads , i have to clean all malicious codes manually it took 2 days , t that time i was completely unfamiliar about virus in themes, when i see something like that, i thought my site has gone and i have nothing in my hand and then i went to sleep(i was in kind of shock).
next day i watch many videos, and articles i understand about codes and finally get them removed.
Jnews is a Very beautiful theme and full of astounding features , but also very slow .
 
  • Like
Reactions: Genie

manatolia

New member
May 16, 2021
1
-2
3
By the way, all talk about plugin but it can be about the theme . Maybe a nulled an used/unused theme. Please delete (not only deactivate) unused plugins and themes.
 

protomaster

Member
Feb 15, 2021
73
11
8
check your php files. go to the each php file to the end a look for empty spaces after the last tag. i had a similar problem. some virus/malwares adds some invisible code after the regular code. be sure there are no spaces after the last php tag ">"
 

About us

  • Our community has been around for many years and pride ourselves on offering unbiased, critical discussion among people of all different backgrounds. We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu