plugin posted on my blog

• 

  awkwardreality · Member · Oct 12, 2011 at 1:12 pm

  • Copy link
  • Add topic to favorites

  A friend of mine on wordpress came to me this morning with several concerns about her wordpress.com site. Unfortunately, I can’t find the answers that she needs. She found a shortened link in the dashboard of her blog. I was able to use link expander, and found the link to be – “http://plugin.name/hotsting Jumbo. info.”(without spaces) My friend also feels that the dashboard of her blog looks unusual? I did a bit of research on the plugin, however, I can’t determine whether this is a mysql injection, if someone is trying to operate her blog from another location using cloud service on a Linux. Or possibly this is common on wordpress? Personally, I have had my blog over a year and I’ve never seen anything like this on my blog. We have all had issues with a hacker as of late, that’s why this is so suspicious. Can anyone help? I feel very uncomfortable knowing a link shortening site (trunc) was used before posting this link/plugin.

  The blog I need help with is: (visible only to logged in users)

• 

  auxclass · Member · Oct 12, 2011 at 1:15 pm

  • Copy link

  We need a link beginning with http to the blog in question to give your friend accurate help.

• 

  awkwardreality · Member · Oct 12, 2011 at 2:08 pm

  • Copy link

  http://rightsideofthetracks.wordpress.com/

  This is her blog.

• 

  timethief · Member · Oct 12, 2011 at 5:12 pm

  • Copy link

  There is no FTP access to free hosted WordPress.COM blogs and we cannot install individual plugins into them. Those found on the internet are for WordPress.ORG installs which run on different software.
  http://en.support.wordpress.com/ftp-access/
  http://en.support.wordpress.com/plugins/
  Please read WordPress.com vs WordPress.org:The Differences

  There have been recent Admin bar and dashboard changes.
  http://en.blog.wordpress.com/2011/09/23/enjoy-a-shiny-new-simplified-admin-bar/

  More traffic for your blog with the follow button

• 

  auxclass · Member · Oct 12, 2011 at 6:36 pm

  • Copy link

  The chance of a “hacked” site at WordPress.COM is real low – the only cases I have seen in the last year were when people had their log-in information gotten by someone or they left the info on the desk.

  What does your friend mean by “unusual”? Can they take a screen shot and then post a link to it here and people can take a look at what it looks like? Or you could ask the staff to take a look at the site also – but please make sure the description of your concern is very detailed.