Worked great! Thank you!! Valarie

Ok, so I did everything you instructed and it says the theme is up-to-date…at 3.3.1, but I thought there is another update available?

Will this allow me to click and automatically update (like updating plugins)? Thanks. Valarie

I saw there was an update to WordPress. The weird thing is it appears that it was automatically updated (I know some Word Press sites do this, while others don’t. Previous to this WP update, I had to manually update it, which is a bit odd…). The latest WP update hopefully fixed some of the issues that were happening:

WordPress 4.2.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.2.2 and earlier are affected by a cross-site scripting vulnerability, which could allow users with the Contributor or Author role to compromise a site. This was initially reported by Jon Cave and fixed by Robert Chapin, both of the WordPress security team, and later reported by Jouko Pynnönen.

We also fixed an issue where it was possible for a user with Subscriber permissions to create a draft through Quick Draft. Reported by Netanel Rubin from Check Point Software Technologies.

Our thanks to those who have practiced responsible disclosure of security issues.

WordPress 4.2.3 also contains fixes for 20 bugs from 4.2. For more information, see the release notes or consult the list of changes.

Did another Sitelock scan on our website. Here’s what came up:

Category: Suspicious content Status:active Type:note
Page URL: http://www.ifmarichmond.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2
Note Info: External iframes found : about:blank found on sample pages ( http://www.ifmarichmond.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2 )
Description: We have detected iframes to external urls on your site. While there are legitimate uses for this, it is also commonly used by hackers to insert content into your page. We recommend you check the urls in this iframe and make sure they are a trusted source.
Action:Check the url to make sure it is something you recognize and are ok with some of your traffic being sent there. If you do not recognize it, remove the iframes and links throughout your website.

Category: Suspicious content Status:active Type:note
Page URL: http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0
Note Info: External link found in javascript : http://support.kreaturamedia.com/faq/4/layerslider-for-wordpress/#group-13&entry-undefined found on sample pages(
http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0,http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0,http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0,http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSli
der/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0 ). The javascript executed starts with :eval(function(p,a,c,k,e,d){e=function(c){return(c<
Description: We have detected external urls after executing javascript found on your pages. Hackers may attempt to hide malicious content by encoding or obfuscating javascript using code functions such as explode or eval. It is also common for 3rd party software/application providers to obfuscate their javascript to attempt to protect their source code.
Action:Check the url to make sure it is something you recognize and are ok with the potential of your traffic being sent there. You can find the URL location of the javascript executing the external link in the detection report output.

I noticed in the theme there is a newer version of Layer Slider. Is there going to an update to reflect this? I am very concerned about these problems being found on my client’s website.

Thank you.

I was informed that several of the files were not only corrupted, but there were some files appeared to have been possibly hacked. I installed Sitelock on the site, though it appears my client needs a heavier-duty version.

Could this be what is happening?

Envato Targeted by DDoS Attack, WordPress Theme Authors Report Major Decline in Sales

http://wptavern.com/envato-targeted-by-ddos-attack-wordpress-theme-authors-report-major-decline-in-sales

If so, do you have a fix or patch coming out? This is very disconcerting!

Thank you.

Hi,

I installed Sitelock on the website, and a couple of errors came up that I thought I’d share:

Category: Suspicious content Status:active Type:note
Page URL: http://www.ifmarichmond.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2
Note Info: External iframes found : about:blank found on sample pages ( http://www.ifmarichmond.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2 )
Description: We have detected iframes to external urls on your site. While there are legitimate uses for this, it is also commonly used by hackers to insert content into your page. We recommend you check the urls in this iframe and make sure they are a trusted source.
Action:Check the url to make sure it is something you recognize and are ok with some of your traffic being sent there. If you do not recognize it, remove the iframes and links throughout your website.

Page URL: http://ifmarichmond.org
Note Info: Cookies found with the following names : PHPSESSID
Description: We have detected cookies on your site. Cookies are generally used for keeping track of information as a user browses around a site. There is no particular security issue however if you do not recognize a cookie name it may be worth investigating.

Do you have a solution to either of these?

Thanks. Valarie