Assuming that your site has not been compromised, and that there are not unknown admin-level user accounts, then this could just be a case of mail spoofing. (Where a person places your email address as the ‘from’, but the email is really being sent by an external process.) I’d change all credentials (hosting, FTP, admin-level … Read more
Anything that is found in the publicly accessible HTML of a website or page can be indexed by Search Engines, or spam bots. If you don’t want a spam bot finding something, don’t put it on a public page.
Of course this is possible it would just require some custom coding. This is an open ended question so I’ll give you an open ended answer of how I may go about this. Add phone number field to user contact Use the profile_update hook to store a random code associated with that number Create a … Read more
WordPress Site has 35K spam images
Automated spam being caught in 2 posts. Can this be used to help get rid of spam on everyone’s sites?
@janoChen, The problem could be that your email server is not using Domain Keys or a valid spf record DomainKeys is an e-mail authentication system that allows for incoming mail to be checked against the server it was sent from to verify that the mail has not been modified. This ensures that messages are actually … Read more
What are your privacy settings? Go to Dashboard -> Settings -> Privacy If it is set to I would like my site to be visible to everyone, including search engines (like Google, Bing, Technorati) and archivers, then your site is actively being crawled/indexed by search engines, and thus visible to spammers. If it is set … Read more
Posts/pages are stored in the wp_posts table. So you could get into the table and delete records. But, not recommended, unless you really know what you are doing with the tables. My procedure would be to re-install WP (from the Update page; reinstall WP), then delete any non-WP (the ‘Twenty*’ ones) themes, and remove all … Read more
Your site is almost definitely compromised. Doing your own cleanup may not be worth the time and effort because reinfection is likely if you miss a single infected file. At this point I recommend to my clients that they get professional help. You may be able to get more details from a site scan by … Read more
It seems Contact Form 7 allows you to specify the recipient via a select dropdown. This means that the recipient e-mail address is stored in the form and sent to the server, which then just reads it. Unless the server then verifies the recipient address was one of the options you specified, this can be … Read more