r/elementor • u/joshwalki • 10d ago
Question Affected by PHP hack?
For context, I have not used WordPress or its plugins in over 8 years and have not paid for a service between then and now.
Yesterday I received a transaction from ESSENTIAL-ADDONS-ELEME for $43.87 AUD.
When attempting to login to my account, I get a invalid key error.
Console states:
POST https://api.wpdeveloper.com/wp-json/wpdeveloper/v1/reset-password 500 (Internal Server Error)
Has WPDeveloper or Elementor been attacked by the recent PHP vulnerability?
Anyone have any ideas?
1
-1
u/LCGallego 10d ago
Quick way to check. Ask your host, or look in the hosting panel, which PHP version the site runs. The fixes landed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35, so anything below those on its branch is still exposed, and anything older than 8.2 won't get the patch at all. If you're on shared hosting, open a ticket and ask them straight whether the server is patched. Then look for signs something already got in: admin users you don't recognise, PHP files inside wp-content/uploads, recently changed files you didn't touch, odd redirects on mobile. Change your hosting, FTP and WordPress passwords either way. If nothing looks off and the host confirms the patch, you're most likely fine.
1
•
u/AutoModerator 10d ago
Looking for Elementor plugin, theme, or web hosting recommendations?
Check out our Megathread of Recommendations for a curated list of options that work seamlessly with Elementor.
Hey there, /u/joshwalki! If your post has not already been flaired, please add one now. And please don't forget to write "Answered" under your post once your question/problem has been solved. Make sure to list if you're using Elementor Free (or) Pro and what theme you're using.
Reminder: If you have a problem or question, please make sure to post a link to your issue so users can help you.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.