Odd code showing up in WP dashboard

Hi, Andy,

I thought I already deleted an older version of the template (in our file system through Godaddy) and then downloaded the newest version afterwhich I uploaded it through Godaddy (the hosting company we use). I’m wondering if there might still be an older version of the theme still in the files.

I’m going to get ahold of Godaddy and see what’s up.

Thanks for getting back to me. I’ll be back in touch if I need further assistance. Valarie

• This reply was modified 9 years, 5 months ago by vblaes.

Hi,

I installed Sitelock on the website, and a couple of errors came up that I thought I’d share:

Category: Suspicious content Status:active Type:note
Page URL: http://www.ifmarichmond.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2
Note Info: External iframes found : about:blank found on sample pages ( http://www.ifmarichmond.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2 )
Description: We have detected iframes to external urls on your site. While there are legitimate uses for this, it is also commonly used by hackers to insert content into your page. We recommend you check the urls in this iframe and make sure they are a trusted source.
Action:Check the url to make sure it is something you recognize and are ok with some of your traffic being sent there. If you do not recognize it, remove the iframes and links throughout your website.

Page URL: http://ifmarichmond.org
Note Info: Cookies found with the following names : PHPSESSID
Description: We have detected cookies on your site. Cookies are generally used for keeping track of information as a user browses around a site. There is no particular security issue however if you do not recognize a cookie name it may be worth investigating.

Do you have a solution to either of these?

Thanks. Valarie

I did everything that was recommended and am still seeing the following error:

Reset by peer
Warning: Invalid argument supplied for foreach() in /home/chomifma08/public_html/wp-content/themes/enfold/framework/php/auto-updates/class-pixelentity-theme-update.php on line 49
Recv failure: Connection reset by peer
Warning: Invalid argument supplied for foreach() in /home/chomifma08/public_html/wp-content/themes/enfold/framework/php/auto-updates/class-pixelentity-theme-update.php on line 49

Need your assistance. Thank you.

Did another Sitelock scan on our website. Here’s what came up:

Category: Suspicious content Status:active Type:note
Page URL: http://www.ifmarichmond.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2
Note Info: External iframes found : about:blank found on sample pages ( http://www.ifmarichmond.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2 )
Description: We have detected iframes to external urls on your site. While there are legitimate uses for this, it is also commonly used by hackers to insert content into your page. We recommend you check the urls in this iframe and make sure they are a trusted source.
Action:Check the url to make sure it is something you recognize and are ok with some of your traffic being sent there. If you do not recognize it, remove the iframes and links throughout your website.

Category: Suspicious content Status:active Type:note
Page URL: http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0
Note Info: External link found in javascript : http://support.kreaturamedia.com/faq/4/layerslider-for-wordpress/#group-13&entry-undefined found on sample pages(
http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0,http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0,http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0,http://www.ifmarichmond.org/wp-content/themes/enfold/config-layerslider/LayerSli
der/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0 ). The javascript executed starts with :eval(function(p,a,c,k,e,d){e=function(c){return(c<
Description: We have detected external urls after executing javascript found on your pages. Hackers may attempt to hide malicious content by encoding or obfuscating javascript using code functions such as explode or eval. It is also common for 3rd party software/application providers to obfuscate their javascript to attempt to protect their source code.
Action:Check the url to make sure it is something you recognize and are ok with the potential of your traffic being sent there. You can find the URL location of the javascript executing the external link in the detection report output.

I noticed in the theme there is a newer version of Layer Slider. Is there going to an update to reflect this? I am very concerned about these problems being found on my client’s website.

Thank you.

The one that is on the website says it’s version 3.2 which is what I have.

I downloaded what’s on there, but it says it’s 3.2.3 in the txt file, so I’ll give that a shot. Very confusing.

Please keep this thread open. Thanks. Valarie

• This reply was modified 9 years, 5 months ago by vblaes.

I saw there was an update to WordPress. The weird thing is it appears that it was automatically updated (I know some Word Press sites do this, while others don’t. Previous to this WP update, I had to manually update it, which is a bit odd…). The latest WP update hopefully fixed some of the issues that were happening:

WordPress 4.2.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.2.2 and earlier are affected by a cross-site scripting vulnerability, which could allow users with the Contributor or Author role to compromise a site. This was initially reported by Jon Cave and fixed by Robert Chapin, both of the WordPress security team, and later reported by Jouko Pynnönen.

We also fixed an issue where it was possible for a user with Subscriber permissions to create a draft through Quick Draft. Reported by Netanel Rubin from Check Point Software Technologies.

Our thanks to those who have practiced responsible disclosure of security issues.

WordPress 4.2.3 also contains fixes for 20 bugs from 4.2. For more information, see the release notes or consult the list of changes.