WordPress Compromised? How to fix it!
Not what you're looking for?
We want your feedback!
If your WordPress installation hosted by Go Daddy has been affected by malware, we’re here to help you get your website cleaned up.
To find out if your website is affected, we have a Security Submission Form available here. When you submit your information, our security team investigates your website to find any malware or out-dated software that might expose you to malware attacks.
These attacks are not specific to Go Daddy or WordPress. Hackers want to affect as many people as possible, so targetting the world’s largest hosting company and most popular blogging software makes sense to them. However, malware attacks can affect any website running out-dated software hosted by any company.
How to Upgrade WordPress and Remove Security Vulnerabilities
Our Help Center has content on upgrading your WordPress installation here.
It is important to understand that malware attacks can affect many items on your hosting account. The information in our Help Center specifically shows you how to update WordPress, but any plug-ins, custom PHP scripts, or applications you’ve installed (active or not) can be affected.
Best Practices to Prevent Malicious Attacks from Affect Your Website
- If you don’t know what files in your account do and they don’t connect to an application you’re using, consider removing it until you can verify its purpose.
- Upgrade or remove old blogs you no longer update, inactive test blogs, and other applications you may have installed on your hosting account.
- Use different and strong password for WP Admin, FTP, and your WordPress MySQL database.
- If your site has been targetted by malware attacks, reset your passwords.
4 min expected wait time
7 Comments on "WordPress Compromised? How to fix it!"
It’s not just affecting WordPress. It’s hit PHP files, and it hit my Drupal installation too, as well as one of my WordPress blogs.
If your site has been hacked, in addition to change your passwords, you also have to reset the secret keys (otherwise the old cookies used by the attackers will still be valid).
This post explains how do to it:
http://sucuri.net/?page=docs&title=changing-wordpress-key
[...] is here to help you avoid the issue and solve the problem.Please see the following important links:Instructions for how to fix an infected WordPress siteForm to request a scan of your site for malware24/7 Support Team contact info Leave a Comment [...]
I now have had a re-infection on a phpbb installation. Please, godaddy, stop this happening.
I recommend installing two security plugins for WordPress:
- Bulletproof Security:
http://wordpress.org/extend/plugins/bulletproof-security/
- Secure WordPress
http://wordpress.org/extend/plugins/secure-wordpress/
I had sites affected by the three previous infections, but after installing these plugins they have resisted the fourth attack.
go daddy is having serious security issues!