Website hacked

• 

  leantagonist · Member · Nov 22, 2023 at 11:03 am

  • Copy link
  • Add topic to favorites

  Our websites was hacked, somehow they installed plugin, which change all js from theme and added hexa javascript wich create blob and redirect random users to win scam page.

  Websites: https://www.imperma.ro and https://littlerose.ro

  After removed everything, and permissions fixed + installez nina firewall + update wordpress, somehow doit again, + add user as administrator and i see this in error_log

  [22-Nov-2023 04:48:12 UTC] WordPress database error Commands out of sync; you can't run this command now for query INSERT INTO wpimp_options (option_name, option_value, autoload) VALUES ('_transient_timeout_nfw_db_check', '1700628552', 'no') ON DUPLICATE KEY UPDATE option_name = VALUES(option_name), option_value = VALUES(option_value), autoload = VALUES(autoload) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, nf_check_dbdata, set_transient, add_option [22-Nov-2023 04:48:12 UTC] WordPress database error Commands out of sync; you can't run this command now for query INSERT INTO wpimp_options (option_name, option_value, autoload) VALUES ('_transient_nfw_db_check', '1', 'no') ON DUPLICATE KEY UPDATE option_name = VALUES(option_name), option_value = VALUES(option_value), autoload = VALUES(autoload) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, nf_check_dbdata, set_transient, add_option [22-Nov-2023 04:48:12 UTC] WordPress database error Commands out of sync; you can't run this command now for query UPDATE wpimp_options SET option_value = '1703220492' WHERE option_name = '_transient_timeout_woocommerce_blocks_asset_api_script_data_ssl' made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, AutomatticWooCommerceBlocksAssetsApi->update_script_data_cache, set_transient, update_option [22-Nov-2023 04:48:13 UTC] WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wpimp_options WHERE option_name = '_transient_timeout_nfw_db_check' LIMIT 1 made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, nf_check_dbdata, get_transient, get_option [22-Nov-2023 04:48:13 UTC] WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wpimp_options WHERE option_name = '_transient_timeout_nfw_db_check' LIMIT 1 made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, nf_check_dbdata, get_transient, get_option [22-Nov-2023 04:48:13 UTC] WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wpimp_options WHERE option_name = '_transient_nfw_db_check' LIMIT 1 made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, nf_check_dbdata, get_transient, get_option [22-Nov-2023 04:48:13 UTC] WordPress database error Commands out of sync; you can't run this command now for query SELECT wpimp_users.ID,wpimp_users.user_login,wpimp_users.user_pass,wpimp_users.user_nicename,wpimp_users.user_email,wpimp_users.user_registered,wpimp_users.display_name FROM wpimp_users INNER JOIN wpimp_usermeta ON ( wpimp_users.ID = wpimp_usermeta.user_id ) WHERE 1=1 AND ( ( ( wpimp_usermeta.meta_key = 'wpimp_capabilities' AND wpimp_usermeta.meta_value LIKE '%"administrator"%') ) ) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, nf_check_dbdata, nf_get_dbdata

  The blog I need help with is: (visible only to logged in users)

• 

  leantagonist · Member · Nov 22, 2023 at 11:04 am

  • Copy link

  Intersing part:
  [22-Nov-2023 04:48:13 UTC] WordPress database error Commands out of sync; you can't run this command now for query SELECT wpimp_users.ID,wpimp_users.user_login,wpimp_users.user_pass,wpimp_users.user_nicename,wpimp_users.user_email,wpimp_users.user_registered,wpimp_users.display_name
  		FROM wpimp_users
  		INNER JOIN wpimp_usermeta
  		ON ( wpimp_users.ID = wpimp_usermeta.user_id )
  		WHERE 1=1
  		AND ( ( ( wpimp_usermeta.meta_key = 'wpimp_capabilities'
  		AND wpimp_usermeta.meta_value LIKE '%"administrator"%') ) ) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, nf_check_dbdata, nf_get_dbdata

• 

  fstat · Staff · Nov 22, 2023 at 1:55 pm

  • Copy link

  Hi there,

  I’ve taken the time to look into your websites and noticed that they are actually using the WordPress.org software and are hosted by a different provider.

  WordPress.org is the same foundational software we use here at WordPress.com, but it’s set up a little differently. Because of this, the specific help you may need can be different. To get the most appropriate help for your issue, I’d recommend posting your question in the official WordPress.org support forums, which you can find here: https://wordpress.org/support/forums/.

  That said, I would also like to mention an alternative for you. You can migrate your website to WordPress.com. We are a managed-hosting platform, which means we take care of all the maintenance and security tasks so that you can focus on creating content for your website. We also offer dedicated WordPress support through both email and live chat to ensure your questions or issues are handled promptly and efficiently.

  If this sounds like something that could interest you, we’ve built an easy-to-use tool specifically for migrating WordPress sites from other platforms to WordPress.com. You can learn more about how to use this tool here: https://wordpress.com/support/import-using-move-to-wordpress-com/

  You can also take a look at our various plans and what they offer on this page: https://wordpress.com/pricing/

  If you have any other questions or if there’s anything else you’d like to discuss, don’t hesitate to let me know.