As I was using MariaDB, the following update did the fix:
update wp_posts set post_content = REGEXP_REPLACE(post_content,'(*CRLF)<noindex>.*</noindex> ','')
See https://dba.stackexchange.com/questions/234774/mariadb-multiline-regex/234778#234778
Related Posts:
- What’s the effect if this malware if infected your WP?
- Malware on site [closed]
- How to find the backdoor of the hack
- My wordpress site was hacked – is my htaccess file compromised?
- My WordPress Blog sends malicious traffic to other sites [closed]
- Hacked WordPress website, as notified by Google Search Console, what to do? [closed]
- How was my WP site hacked [closed]
- If a WP install is hacked, can it spread to other domains on a server?
- Find and Replace text in the entire table using a MySQL query
- Is it a good idea to rename the “index.php” in “wp-admin” folder to avoid being hacked?
- How to fight this wp-info.php exploit? [closed]
- Prevent Hacking of WordPress Site [closed]
- Suspicious URLs being loaded after hack and restore
- Server hacked: correct contents of wp-uploads directory? [closed]
- Site hacked with malware [closed]
- Copy wordpress website pages and content
- How do I know if my WP Theme is using infamous TimThumb?
- Spam pages hack? [closed]
- Check for malicious code?
- Is the current spate of hacks related to the recent security fix?
- I have removed the malware from our website however, when I tried again to search the word from Google it is still there [closed]
- Have I been hacked? Mysterious code at the top of theme files [closed]
- Strange codes in my wordpress site and my website is running too slow [closed]
- Spam Content Serving from old cached version of site?
- How to solve wordpress redirection (no malware was found)?
- Help determining if the following are legitimate files
- My blog was hacked? WP posting random posts
- Have I been hacked – getting new site setup email for 8 localhost wordpress sites
- Site Hacked – WordPress Divi Site – Cannot find where to fix the issue? [closed]
- malware in wordpress installer on dreamhost. [closed]
- Where I can find a list of WordPress security risks?
- looking for indoxploit hack solution [closed]
- Why functions.php file automatically empty?
- Bruteforce attack from 127.0.0.1?
- WordPress installer attack
- Why wordpress is hitting another url
- Where do hackers usually run their hacking script? [closed]
- Malicious Code in Index.php WordPress [closed]
- WP Site Hacked, Serp Google Spam [closed]
- My site appears to be hacked [closed]
- WordPress Redirect Hack
- Strings of malicious code to look for after a hack
- Hacked/cloaked sitemap [closed]
- If a hacker changed the blog_charset to UTF-7 does that make WordPress vulnerable to further attacks?
- WordPress site hacked. Has .htaccess been hacked?
- Scanning Database for malicious Data
- How Attackers write script into my php files?
- Websites defaced by uploading script using theme editor
- How can I find security hole in my wordpress site?
- Has anyone experience w/ WordPress (MultiSite) hidden users (possibly hacked)?
- Restrict access to xmlrpc.php
- How to prevent bot or someone to modify any file automatically?
- Hacked website redirect, only on desktop, help with restoring it [closed]
- How do i disable/disallow and tags in TinyMCE?
- hSite has no css on mobile [closed]
- Unfamiliar query string in Google Search Console URL not found
- Strange gibberish JavaScript in Editor – site hacked?
- wp-config.php modified?
- Suspicious Files
- How to prevent wp-login brute force attack from thousand of different IP? [duplicate]
- Files automatically added
- How To Clean The Malware Infected & Hacked WordPress Websites? [duplicate]
- You appear to have already installed WordPress. To reinstall please clear your old database tables first
- getting casino links on my woocommerce site [closed]
- How to locate & delete hidden pages on a site
- New user is assigned 2 roles: customer and superadmin
- Verifying that I have fully removed a WordPress hack?
- Hacked WordPress website /Homepage redirect [closed]
- wp-admin folder removed by hacker [closed]
- Spam users registers even when registration is disabled
- How to find exploited wordpress plugin [closed]
- Some one is trying to hack my website, Need guidance [closed]
- Efficient way to check local WordPress php files and Database for malicious code? [duplicate]
- What can I do when an outside party hacks into my weblog and changes my display name?
- Troll the hackers by redirecting them
- Website show Google Ads when we have no Google Ads linked to our website
- malware undetectable by multiple scans
- WordPress Hacked 5.5 admin-ajax.php [closed]
- Can’t access htaccess [closed]
- Replace domain in database
- Admin user lacks admin permissions after hack and can’t reinstate
- Website Got Hacked – Fixed – Now Cannot Activate Theme
- Site blocked by WebSense on fresh WP Install
- WordPress disable direct access of files in WordPress installation path
- Is this a hack? WordPress Usernames of every website we have changed into one single name automatically?
- Should I prevent access to .htaccess and wp-config.php files?
- Javascript Injection on my WordPress Site
- how can i find malware code and remove from wordpress site to stop it redirecting to hackers click view pages
- Replacing nav-menus.php file with standard clean one?
- Some code is added automatically to my site’s header – what is it?
- Hacked site using transient API?
- How can hackers access WP usernames? [duplicate]
- suspicious boolean.php file in wp web root [closed]
- How to remove content from hacked pages? [closed]
- My WP site and password was hacked, what to do? [closed]
- Is my WP site being hacked?
- Should WordPress Add Options to Enhance Security or Leave it to plugin developers? [closed]
- WordPress Hacks/Defacing [closed]
- Redirected You too Many Times and Homepage Not Loading
- WordPress website is redirecting on some different shopping page