I have been hacked twice through the theme – need help with patch or ideas ..

[rossiegirl]

we have edited a number of these pages … are there any new patches we should be aware of of ideas to
1) fix
2) prevent from re occurring ?

{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/theme-compat/comments.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/pomo/ajax.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/locale.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/js/tinymce/plugins/wordpress/img/system.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/js/tinymce/plugins/spellchecker/img/xml.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/js/tinymce/themes/start.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/SimplePie/Content/Type/Sniffer.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/SimplePie/Restriction.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-includes/Text/dir.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/woocommerce/dummy-data/footer.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/buddypress/bp-messages/js/autocomplete/option.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/buddypress/bp-core/bp-core-theme-compatibility.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/buddypress/bp-core/bp-core-component.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/backupbuddy/lib/xzipbuddy/files.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/sh-jobamatic/includes/gallery.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/revslider/js/farbtastic/article.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/bbpress/includes/users/functions.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/bbpress/includes/core/update.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/bbpress/includes/core/options.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/paid-memberships-pro/services/applydiscountcode.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/paid-memberships-pro/scheduled/creditcardexpiringwarnings.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/plugins/paid-memberships-pro/css/menu.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/uploads/backupbuddy_temp/index.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/uploads/systemcash.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/uploads/options.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate-child/assets/dirs.php
{HEX}php.cmdshell.unclassed.352 : /home/basinexp/public_html/wp-content/themes/lightweight/license.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/lightweight/header.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/twentythirteen/page.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/twentythirteen/footer.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/framework/metaboxes/template.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/woocommerce/assets/article.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/sidebar.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/code.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/bbpress/content-single-topic-lead.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/paid-memberships-pro/images/title.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/page-templates/full-width.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/page-templates/left-sidebar.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/themes/sweetdate/page-templates/search.php
{HEX}base64.inject.unclassed.7 : /home/basinexp/public_html/wp-content/ini.php

[Abe]

Hi, I don’t know how it could be something in the theme but it could be more related to server security. I see there files from all over the wordpress core, themes, plugins. You should replace all your wordpress, theme, plugins files with newly downloaded ones

Hi there!!! Help others from the community and mark any reply as solution if it solved your question. Mark as a solution

---
@ SeventhQueen we do our best to have super happy customers. Thanks for being our customer.

[Author]

Posts