Remove a malicious code

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator threadi

    (@threadi)

    12 hours, 49 minutes ago

    The URL you mentioned is a JavaScript file that appears to be included in every browser rendering of your website. It’s written in a strange way and appears directly in the header section of the HTML code.

    At first glance, it looks like your project has been compromised. My recommendation: first read this article:

    FAQ My site was hacked

    First, you should definitely check to see if you have a security plugin, and if so, run a scan with it. If you don’t have one, install one – there are plenty to choose from: https://wordpress.org/plugins/tags/security/

    If you find anything along the way, follow the instructions.

    However, if the scan doesn’t find anything, you’ll need to take a closer look at your project. First, check the theme – you have a child theme where you can also configure such settings individually. If you find that line in the functions.php file, ask the person who created the theme why it’s there. When in doubt: remove it.

    Thread Starter raunharmantech

    (@raunharmantech)

    12 hours, 45 minutes ago

    Checked the functions.php in both main theme & child theme. No such script code found.
    Scanned with :
    WP Ninja (free version). All clean.
    Site lock: all clean
    Wordfence: Clean

    Using Elementor theme, no specific theme

    Bigul Malayi

    (@mbigul)

    12 hours, 44 minutes ago

    Hi @raunharmantech,

    Are you using any security plugins like Wordfence? If so, run a full site scan after a full site backup. This will help you find the infected files.

    Refer to the following tutorials for more details.

    https://www.sucuri.net/guides/how-to-clean-hacked-wordpress/

    FAQ My site was hacked

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.