You're reading one of the top pains on Mailerlite Integrations — a free sample of the catalog. Create a free account to browse all Shopify & Atlassian pains and the basic Chrome catalog.
WordPress site owners struggle to fully clean persistent malware reinfections
.23
Demand — how loud & how many (score)
Willing to payImplicit
Momentum (7d)▼ 0.7%
Cluster112 posts · 93 people
MarketplaceMailerlite Integrations
Updated2d ago
The story
The pain
We clean our site of malware, but it keeps coming back. Hidden admin accounts, injected files with normal-looking names, and database-resident code make it nearly impossible to eradicate without a specialist. Even after a full cleanup, a single open browser tab or an unchanged password can let the attacker back in.
Evidence
What people said · 112 complaints, 93 people
We'd done a full cleanup, and then the malware plugin got uploaded again from a real admin's computer, logged in as that admin. We were about to tell the client their laptop was infected. It wasn't. That admin still had a tab open on the site from back when it was hacked, and the bad code in that tab was still running. Every minute it checked whether an admin was logged in, and as soon as one was, it uploaded itself again.
My website's file manager has random files which looks like hack/virus one file name accesson.php I tried to delete keep coming back. I got that checked by developee and he cleaned it but everything came back.
They created webpages, put injections to restore everything if we wiped it, left files and hidden code all over the place and installed malware, and redirected Google searches from our site to somewhere in Thailand. It took a security cleanup specialist two full days to find and remove everything.
Export the pain — problem, evidence and market signals — as Markdown, PDF or JSON. The Markdown export ships with a built-in briefing you can hand straight to a developer or an AI agent.