WordPress.com site hacked – help!

  • Unknown's avatar

    Hey guys,

    Three days ago a friend notified me that my WordPress blog seemed to be posting rubbish spam every few hours and I’d probably been hacked. I checked and yes, random non-nonsensical posts were appearing, giving the impression that I’d gone completely mad and incoherent – just the sort of message I was hoping to avoid.

    I tried to log-in and realised that I’d been shut out, but a swift password change let me back into the dashboard where I hoped to delete the posts. However, they did not show up in the dashboard. They are still on the site, but from what I can see in dashboard, they do not exist and I cannot delete them.

    At this point I contacted WordPress, hoping they could help me resolve the issue. I have yet to hear back from them.

    Today I have noticed that despite the password change, spam is still being posted every few hours and there is nothing I can do to stop it. Another desperate (as yet unanswered) email to WordPress later, and I thought I’d post a forum topic to see if anyone can offer me any advise on how to fix this issue?

    Help!

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar

    That site is a self hosted WordPress.org install. You are posting to the wrong support forum. Post to http://wordpress.org/support/ as that’s the correct support forum for your software.
    For clarity read > WordPress.com vs. WordPress.org: The Differences

  • Unknown's avatar

    Hey,

    Thanks for your reply, however I can assure you, my site IS hosted by WordPress.com, it is not a self hosted WordPress.org site. The domain name is purchased, but the site itself is still hosted by WordPress.com.

    Any tips for me?

  • Unknown's avatar

    Change the name servers back to WordPress.COM

    http://en.support.wordpress.com/domain-mapping/domain-management/

    Change your password then go to Dashboard >> Users and delete any bogus users

  • Unknown's avatar

    http://graceetcetera.com/, the site linked to your username, is hosted at host.putra.info using wordpress 3.2.1. It is a self-hosted site. It is NOT hosted at wordpress.com.

    http://ismyblogworking.com/graceetcetera.com/

    Meta Name generator on your site:
    <meta name="generator" content="WordPress 3.2.1" />

    Meta Name generator for a site hosted at wordpress.COM:
    <meta name="generator" content="WordPress.com" />

    Go to the wordpress.ORG forums that timethief linked to.

  • Unknown's avatar

    Have you kept up to date in your renewals? Sounds like maybe you lost your domain name and some spammer grabbed it instead.

  • The topic ‘WordPress.com site hacked – help!’ is closed to new replies.