Chrome Dev Tools console says every page in my blog has link to http://maps.google.com [closed]

Its definitely being hooked into wp_head(), probably with wp_enqueue_scripts().

To find the culprit:

First, deactivate your theme, use a twentyx theme instead. Then refresh the front end and check the source code again.

If it’s gone: its your theme. To find where its being called from in your theme, search your theme directory /socrates4/ for some keywords, like google.com or wp_head or enqueue. (I’d guess it’s in functions.php so if you’re going to browse manually, that’s a good place to start).

If it’s not gone, it’s not your theme: so try deactivating your plugins, one by one. Everytime you deactivate one, check the front end source code, and see if it’s gone, you’ll be able to find which plugin is causing it.

You can then either

  • fix the plugin yourself (usually a bad idea if its hosted on wordpress.org as updates will overwrite your changes).
  • leave a support ticket with the developer, and hope they do somthing about it
  • keep it deactivated, delete it, and find a better plugin thats well written enough to not hard link http

Related Posts:

  1. What security concerns should I have when setting FS_METHOD to “direct” in wp-config?
  2. I found this in a plugin. What does it do? is it dangerous?
  3. Disabled plugins are they security holes – rumor or reality?
  4. What could a hacker do with my wp-config.php
  5. How Can I Securely Implement a Password-less Login Feature?
  6. Security and .htaccess
  7. Why “Contact Form 7” doesn’t update PHPmailer library?
  8. Are there procedures to prevent malicious plugin updates?
  9. Does WordPress contain “default” anti-SQL injection code that responds with a 404 error?
  10. WordPress Capabilities: edit_user vs edit_users
  11. Should we use plugins that aren’t available from the official WordPress site?
  12. How to check plugins for malicious code?
  13. How to properly secure my WordPress installation?
  14. Why allow overriding crucial pluggable functions wp_verify_nonce and wp_create_nonce?
  15. Where should my plugin POST to?
  16. Security error WP 4.0 + WP phpBB Bridge [closed]
  17. Should I install plugins to my WordPress installation from web sites having in URL “nulled” or, “null”?
  18. Disabled plugins are security holes – rumor or reality?
  19. Should I use RIPS tool to test my themes and plugins?
  20. Prevent Brute Force Attack
  21. How many security plugins are too many? [closed]
  22. Upgrading WordPress 4.0 asks for FTP password
  23. How Restrict access to admin dashboard by specific static ip?
  24. When is it useful to use wp_verify_nonce
  25. Protecting against malicious code in WordPress plugin updates
  26. Questions about brute force attacks on the admin username, coming from amazon IP addresses
  27. How to expire all wordpress user passwords instantly?
  28. How to limit WordPress pages during updates?
  29. rms_unique_wp_mu_pl_fl_nm.php
  30. Weird problems after recovery from security breach
  31. How can we deal with unmaintained plugins with vulnerabilities?
  32. Security issues with WP sites
  33. Escape when echoed
  34. Should you escape hardcoded URLs?
  35. Preventing BFA in WordPress without using a plugin
  36. How can I make uploaded images in the editor load with HTTPS?
  37. How to stop xmlrpc attacks without disabling component to allow JetPack to work in WordPress?
  38. WordPress filter that hook after each action/filter hook
  39. How to delete Passwrd Protected posts cookies when a user logged out from the site
  40. The safest way to automate WordPress backups
  41. wp_create_nonce function doesn’t work inside a plugin?
  42. Does WordPress validate inputs to all functions? (such as get_user_meta and insert_user_meta)
  43. Upgraded to latest version – 3.0.3 and Now I get a “sufficient permissions to access this page” error
  44. How to block plugin activations with no known user or coming from unknown IP address range?
  45. Nonce failing on form submission
  46. Check for security updates
  47. Standard Fail2Ban vs. WP Fail2ban vs. WP Fail2Ban Redux
  48. Why can’t I access my Intranet LDAPS with NADI?
  49. Malicious File Upload [closed]
  50. Stop Plugin Enumeration [closed]
  51. Malware installation during plugin update?
  52. Hack-Proof OR Security in WordPress — is it real?
  53. Security and Must Use Plugins
  54. Is Timthumb still broken? What security measures should be taken?
  55. Prevent direct access to WordPress plugin assets?
  56. Is it safe to use admin-ajax.php in the frontend?
  57. Does heavy theme and plugins affect server’s response time? [closed]
  58. How to protect WordPress from security scanner [closed]
  59. Specific way to allow WordPress users to view their current password? And edit it?
  60. Is there any pre-existing plugin to track and block IPs with suspicious activity on my site?
  61. How to prevent plugins from sniffing/stealing other plugins’ options?
  62. Vulnerability Concern From the Plugin or From Not Updating the Plugin?
  63. Custom API plugin to execute 3rd party API to retrieve data
  64. How to deal with Slow HTTP POST (slowloris) vulnerability
  65. Running multiple security plugins
  66. how do I secure my WP website from hackers? [closed]
  67. Webservice credential storage [duplicate]
  68. If I use an alternative login (e.g. CAS or other SSO) plugin, is my site protected from the recent brute force login attempts?
  69. Is this plugin safe to run?
  70. Is the Block Bad Queries Plugin Still Relevant?
  71. WP Insert Post If user refreshes override new post
  72. 404 errors when updating options in admin dashboard
  73. Website Captcha Error: The reCAPTCHA wasn’t entered correctly
  74. Hide plugins and theme from public
  75. WordPress search shows protected content
  76. Security of a WordPress Plugin
  77. Can I disable xml-rpc by setting it to false?
  78. Help to Create a Simple Plugin to make a post
  79. Content-Security-Policy implementation with WordPress W3Total Cache plugin installed
  80. prevent anonymous access to WordPress site (non-admin site)
  81. Bing/msn bots is heavily requesting random of my website
  82. “Fire Secure” menu item
  83. Securing a plugin pop-up window
  84. https rewrite not working for All in one security Brute force > rename login url
  85. Redux framework somehow added to my site, can’t locate in plugins
  86. wp_verify_nonce fails always
  87. How can i see/log all requests coming from a registration form (not from the UI)?
  88. Write mysql credentials in plugin
  89. Site is continuously accessing by several IPs
  90. Validating values using Settings API?
  91. using .htaccess only for wordpress security no plugins
  92. SWF in wordpress post
  93. Problem with permissions in wp-content/plugins
  94. My WP site and password was hacked, what to do? [closed]
  95. How to resolve these findings from security audit
  96. How I can hide my wp folders from Inspect Element (Developer Tools)
  97. How to Find WordPress site has backdoor login Codes
  98. How to delete Password Protected posts cookies when a user logged out from the site
  99. How to rename files during upload to a random string?
  100. Stop the user if login from the cookies