Site Has Malicious Code/Image

[Marcus Genzlinger]

Does anyone have an idea to locate the malicious code on the WordPress page below.  If you look at the background you will notice "letsdo.website"   

Here is some additional information that may or may not help... 

1. Google Ads and their malware scanner found this URL they flagged. 
   https://philadelphiacommunitycorps.org/donation-of-tools/https://letsdo.website/philadelphia/wp-content/uploads/2021/01/blog_top-image_philadelphia-community-corps-1024x576-1.jpg
   
2. The page is built using Elementor (not my choice)
3. Contacted hosting provider Bluehost, and they have exhausted resources and given up.
4. I searched files
5. I searched the phpMyAdmin

Here is the offending page

https://philadelphiacommunitycorps.org/donation-of-tools/

Any help or suggestions is appreciated. Thank you!

[Toby C]

Marcus, Have you run a WordFence scan?

Toby

--
You received this message because you are subscribed to the Google Groups "Minneapolis St. Paul WordPress User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mpls-stpaul-word...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mpls-stpaul-wordpress/78c5cfae-d204-4169-a2ab-b435ecd08ca0n%40googlegroups.com.

[Ben Wilson]

If you don't have any luck, I've used this service with great results.

https://www.wpfixit.com/

Ben

[Justin Foell]

It looks like the letsdo.website images have been injected into an elementor CSS file in uploads:

https://philadelphiacommunitycorps.org/wp-content/uploads/elementor/css/post-928.css

[Patrick Lewis]

That's what I found as well. Post ID 928 is the home page. Elementor allows adding CSS to a page. That's where the overlay on the tools page comes from. How your site was edited to inject this CSS is another matter.

--
You received this message because you are subscribed to the Google Groups "Minneapolis St. Paul WordPress User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mpls-stpaul-word...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/mpls-stpaul-wordpress/e12aa833-0d85-4d8e-979f-41cd2a0160ben%40googlegroups.com.

--

patric...@gmail.com

(612) 384-2325

[Winnie Williams]

Looking for examples of multi-lingual websites where the other languages are not done with google or something similar, but with native translations. Looking for how those other languages are being presented on the site as options, particularly if the site isn’t static and so not everything may be translated. If you have any examples to point me at, I’m very interested. Thanks.

[Justin Foell]

Hey Winnie!

There's a lot of different ways to do this from having separate sites to using multi lingual plugins. 

One that has been popular at my work is Polylang Pro. Campbell's uses it on a few of their French/English Canadian sites. It's easier to configure and use than WPML (which works fine but takes some getting used to). 

On Thu, May 19, 2022 at 11:00 AM Winnie Williams <winni...@gmail.com> wrote:

Looking for examples of multi-lingual websites where the other languages are not done with google or something similar, but with native translations. Looking for how those other languages are being presented on the site as options, particularly if the site isn’t static and so not everything may be translated. If you have any examples to point me at, I’m very interested. Thanks.

--
You received this message because you are subscribed to a topic in the Google Groups "Minneapolis St. Paul WordPress User Group" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/mpls-stpaul-wordpress/9f9YTFW2_co/unsubscribe.
To unsubscribe from this group and all its topics, send an email to mpls-stpaul-word...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mpls-stpaul-wordpress/76E2E6DA-5141-4442-A4A0-FB184821BAAA%40gmail.com.

[Justin Foell]

I'll have to check on Monday which sites use Polylang Pro b/c I'm out of town. It's not the main soup or corporate site b/c those are English only. 

On Fri, May 20, 2022 at 11:03 AM Winnie Williams <winni...@gmail.com> wrote:

Thank you - these were just the pointers I needed. I did not know about WPML or Polylang Pro. I can see on the WPML site how the switching works. You mentioned the campbells sites using polylang, but I’m not seeing it in use on campbells or on the polylang website. Do you happen too have a link to a site where campbells is using it. No worries if not, I can just experiment with both.

You received this message because you are subscribed to the Google Groups "Minneapolis St. Paul WordPress User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mpls-stpaul-word...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mpls-stpaul-wordpress/CAPDwGQQvxKD7jNHFRddBAjbsUzK215ZTJuqwjqokw2zZ4Hhm2A%40mail.gmail.com.

[Justin Foell]

This is the one I was thinking of: https://www.kettlebrand.ca/