Sites got hacked

danger

Member

Jan 6, 2019

121

23

18

Belgique

• Mar 10, 2021

• #1

Hello everyone,

Since yesterday, I have already suffered 3 hacks. A new user registered, and then I have no access to my site. Example: www.dh-automotive.com/wp-login.php

It's weird because I only use plugins and themes that I found here. Maybe there is a new breach with the 5.7 update?

What do you advise me to do to avoid these attacks?

 

MrSam_1

Well-known member

Administrative

Trusted Seller

Dec 1, 2018

23,638

26,974

120

• Mar 10, 2021

• #2

Do you have The Plus Addons for Elementor installed?

 

danger

Member

Jan 6, 2019

121

23

18

Belgique

• Mar 10, 2021

• #3

medw1311 said:

Do you have The Plus Addons for Elementor installed?

Click to expand...

Yes I think

 

MrSam_1

Well-known member

Administrative

Trusted Seller

Dec 1, 2018

23,638

26,974

120

• Mar 10, 2021

• #4

danger said:

Yes I think

Click to expand...

Critical 0-Day The Plus Add-Ons Vulnerability Fixed Under 48 Hours | The Plus Addons for Elementor

The Plus Add-ons was Hit With the Cyber Attack recently. Our Development Team immediately started working on the Patch and Launched a completely Secure &

theplusaddons.com

 

• 

Reactions: Saint Gabriel and Deepansh

danger

Member

Jan 6, 2019

121

23

18

Belgique

• Mar 10, 2021

• #5

Oh oh.. ok so how can I access my admin site back? I tried to back up the database from yesterday and before yesterday but still the same problem.

 

MrSam_1

Well-known member

Administrative

Trusted Seller

Dec 1, 2018

23,638

26,974

120

• Mar 10, 2021

• #6

danger said:

Oh oh.. ok so how can I access my admin site back? I tried to back up the database from yesterday and before yesterday but still the same problem.

Click to expand...

11 Ways To Fix Can't Access WordPress Admin

Unable to log into WordPress? There are multiple solutions to get your wp-admin access back. Here’s what to do if you can't access WordPress admin.

blogvault.net

 

tuton012

Strive for progress, not perfection

Babiato Lover

Trusted Uploader

May 23, 2019

1,607

2,060

120

Near You

• Mar 10, 2021

• #7

pm your Cpanel login i can fix the issue for you

 

• 
• 

Reactions: smalok and MrSam_1

MrSam_1

Well-known member

Administrative

Trusted Seller

Dec 1, 2018

23,638

26,974

120

• Mar 10, 2021

• #8

I don't think that's the only issue tho it could be main one.
I was looking today over 3 servers compromised with a redirect url encoded in all index files.
none of the wp sites had that plugin.
All had wp 5.6 and only thing in common beside that was the twentytwentyone theme.

 

• 

Reactions: diben

danger

Member

Jan 6, 2019

121

23

18

Belgique

• Mar 10, 2021

• #9

tuton012 said:

pm your Cpanel login i can fix the issue for you

Click to expand...

I don't have Cpanel, I'm on ONE.com host

 

tuton012

Strive for progress, not perfection

Babiato Lover

Trusted Uploader

May 23, 2019

1,607

2,060

120

Near You

• Mar 10, 2021

• #10

provide me login detail via pm

 

tuton012

Strive for progress, not perfection

Babiato Lover

Trusted Uploader

May 23, 2019

1,607

2,060

120

Near You

• Mar 10, 2021

• #11

this issue has been resolve

 

• 
• 

Reactions: diben, AlexRazor, smalok and 4 others

Energy

Active member

Dec 19, 2019

198

90

28

⚡

• Mar 10, 2021

• #12

tuton012 said:

this issue has been resolve

Click to expand...

Nice job! What seemed to be the problem?

 

tuton012

Strive for progress, not perfection

Babiato Lover

Trusted Uploader

May 23, 2019

1,607

2,060

120

Near You

• Mar 10, 2021

• #13

Energy said:

Nice job! What seemed to be the problem?

Click to expand...

had 2 admin users one was with a name (admine) and redirect in the .htaccess

 

• 

Reactions: diben, markleon, underwater and 1 other person

danger

Member

Jan 6, 2019

121

23

18

Belgique

• Mar 10, 2021

• #14

tuton012 said:

this issue has been resolve

Click to expand...

Big thank you !!!

 

• 

Reactions: diben and tuton012

danger

Member

Jan 6, 2019

121

23

18

Belgique

• Mar 10, 2021

• #15

Energy said:

Nice job! What seemed to be the problem?

Click to expand...

The problem came because of The Plus Addons Plugin

 

• 

Reactions: Hackerino

Hackerino

Active member

Oct 22, 2019

147

72

28

24

Porto, Portugal

• Mar 10, 2021

• #16

Its nice to see that this problem was solved. Some people just come here and do some accusations against Babiato's resources because their website got hacked.

Stay safe!

 

ChainofChaos

Active member

May 5, 2020

148

55

28

• Mar 10, 2021

• #17

You need to add a security plugin to your website as well. I have experienced that my website got injected with code. Your plugin especially nulled plugin or your theme, may have a vulnerability, so a security plugin is a must to keep your website safe.

 

underwater

Active member

Nov 26, 2020

256

63

28

• Mar 10, 2021

• #18

tuton012 said:

this issue has been resolve

Click to expand...

So worried to read the title and then so glad to read @tuton012 's post that it's been fixed. You are the man Bro!

 

• 

Reactions: tuton012