Please Help!! I lost hope in WordPress!

Eddie147 said:

Hi amazing community, I feel lost today. In fact, I've been feeling this way for the past two weeks. I design websites for clients and I lost them all. Everything's been hacked! All the websites are now full with malicious code.

Whenever someone visits one of my websites, they get redirected to spammy websites. I tried restoring from different back-ups, I updated all themes and plugins, installed Wordfence security. Sometimes this clean the website, but next day it's hacked again.

I have 0 knowledge in IT security and malware removal and this has been really frustrating. I 'm clueless and I just hope someone would help me here.

BTW, sometimes I use theme and plugins from here and keep them up to date from here as well.

Pleaaaase someone help me!

Click to expand...

Eddie147 said:

Hi amazing community, I feel lost today. In fact, I've been feeling this way for the past two weeks. I design websites for clients and I lost them all. Everything's been hacked! All the websites are now full with malicious code.

Whenever someone visits one of my websites, they get redirected to spammy websites. I tried restoring from different back-ups, I updated all themes and plugins, installed Wordfence security. Sometimes this clean the website, but next day it's hacked again.

I have 0 knowledge in IT security and malware removal and this has been really frustrating. I 'm clueless and I just hope someone would help me here.

BTW, sometimes I use theme and plugins from here and keep them up to date from here as well.

Pleaaaase someone help me!

Click to expand...

Eddie147 said:

My hosting does provide daily backups, I backed up the websites from different dates when it was working fine, then after like 24 hours or so, the site is hacked again. So, no idea how they got in.

Click to expand...

Eddie147 said:

I don't use many plugins. I mostly work with elementor pro, plus addons, woocoomerce and its extensions. Themes: Flatsome, Xstore, Phlox. I think Elementor is the main cause but can't be sure.

Click to expand...

Critical 0-Day The Plus Add-Ons Vulnerability Fixed Under 48 Hours | The Plus Addons for Elementor

The Plus Add-ons was Hit With the Cyber Attack recently. Our Development Team immediately started working on the Patch and Launched a completely Secure &

theplusaddons.com

Eddie147 said:

but I don't code. I just use elementor page builder

Click to expand...

phaze1G said:

The database is infected, that's why it keeps on being hacked..even if you put up the back site...hit me up if you need any help.

Click to expand...

MrK said:

This makes sense, but how would they do it only with the db?

Click to expand...

phaze1G said:

The database is infected, that's why it keeps on being hacked..even if you put up the back site...hit me up if you need any help.

Click to expand...

KarmaticOne said:

@phaze1G is exactly right.

You're infected at the db level and your other sites are being hacked because you are likely using a single cPanel account for all your sites.

To remedy this, split up your sites to their own cPanel accounts and rebuild the sites from scratch.

Click to expand...

themadoxter said:

Geez, i do the same thing, many sites in a single cpanel account, never got hacked.

Click to expand...

KarmaticOne said:

You're either lucky or are more conscientious.

Most people who have this architecture and experience such attacks are likely exposed due to an infected plugin that buries itself deep in the db like "duplicator-pro".

Click to expand...

themadoxter said:

I don't even know the duplicator pro was used for this (hacking) but yes, i'm using wordfence, loginizer, 2 step login, virus total, google recaptcha and i change my admin url, daily backups, lock anyone who try to use "admin" word and variations and so on.

Click to expand...