secretslol
Joined 1 year ago
Karma
270
Submissions
27
Member since
Mar 11
Joined 1 year ago
I had a quick browse through your site, but I could not see where you are based, but I get whiffs of more American 'trust me, bro' exports which I've been eye rolling at for two decades now.
They did this:
- Two admin accounts in the database.
- plugin dir: wp-content/plugins/wp-core with remote command-execution web shell wp-core-[12 random chars].php
- firewall.php backdoor in mu-plugins dir with admin on GET ?sergei
- cache-seo-helper.php backdoor
- fixer.php which renames the wordpress version number to one which is patched.
I have decided to give up on Wordpress.