I have been exposed XSS Attack to My Website

The past week I entered the site and found when I click on any place in the site that opens inappropriate links I hope the assistant and thank you .

Hello,

Could you please check how it works with some default WordPress theme like twentysixteen to understand is it our theme issue or not?

Regards

i change the theme to twentysixteen and its do the same issue !!

@Mysara

Install wordfence plugin and scan your wordpress environment.

If by any chance you had yellow pencil plugin installed, update it to latest version it had a vulnerability

https://www.wordfence.com/blog/2019/04/zero-day-vulnerability-in-yellow-pencil-visual-theme-customizer-exploited-in-the-wild/

or this plugin

https://www.wordfence.com/blog/2019/04/yuzo-related-posts-zero-day-vulnerability-exploited-in-the-wild/

Hello,

i change the theme to twentysixteen and its do the same issue !!

It means that our theme does not cause the problem. Perhaps one of your plugins contains the harmful code.

Please deactivate all the plugins not related to the theme and switch the parent theme, check the issue

Best Regards

[Author]

Posts