Breach in SM plugin

[Bloves]

Hi,

since some time I’m using the Simple Membership plugin in combination with Stripe.

When people actually pay nothing is wrong and all works like normal.

BUT

More and more “parasites” find ways to get a “membership” or a “subscription” without paying
for our service. I get notification through mail that the subscriber has changed it’s password and find
their subscription back in the “users” page of wordpress.
All I can do is following up daily and remove these “parasites” manually.

Anybody any idea how to stop this ?

Thank you !
Kind regards,
Brad

http://www.lovetruthsite.com

[mbrsolution]

Hi,

More and more “parasites” find ways to get a “membership” or a “subscription” without paying
for our service.

If you have paid membership setup, no one can view the protected content unless they have paid for their membership. It sounds like your site might have been compromised. What type of security have you setup for your site?

If your site has been hacked, the following URLs can help you. These are instructions provided by WordPress org support staff.

My Site was hacked
Hardening WordPress

Kind regards.

[Bloves]

Hi mbrsolution,

thanks for your reply ! Much appreciated.

I have Siteground securtity support. So, I guess I’m good with that.

Have contacted support regarding and after scanning the site,they can’t find any “hacked” situation.

It’s kinda weird that the problem always situates around the WP plugin… it’s always via that way
ppl get in… that’s at least what I CAN see what’s happening.

Not sure what I can do more… but will look into the links you provided.

Thank you !

Kind regards,
Brad.

[Author]

Posts