Opened 2 years ago

Last modified 2 years ago

#12497 assigned Bug/Something is broken

CVHPower website not working

Reported by: Owned by:
Priority: Urgent Component: Tech
Keywords: Cc:
Sensitive: no

Description website is not working and has not been operational for weeks. I sent a ticket a few weeks ago and I have not heard back from you and the website is still down.

Change History (4)

comment:1 Changed 2 years ago by

  • Owner set to
  • Status changed from new to assigned

comment:2 Changed 2 years ago by

  • Owner changed from to

Hi, aaron,

I did see the ticket you opened but I think maybe you didn't see my response.

I responded to you there that we should follow up on ticket that I had already opened about the problems with your site. I copied you on that ticket and I also attempted to contact your organization with the contact info we have for you. Your site was compromised and was being used to send spam through the host server.

comment:3 Changed 2 years ago by

Got it! I did not see your response, but thank you for sending it again. Is the contact person you have on file Michelle Perez? If not, we've had some staff turnover since setting it up and need to change it to Aaron Jones (Aaron@…) and Michelle Perez (Michelle@…).

What are the next steps to addressing this issue?

-Aaron J.

comment:4 Changed 2 years ago by

Thanks, I've just updated your listed contacts in the control panel. I've also added you to the member access list for the Community Voices Heard Power membership control panel. You can now review and modify the contact list directly through

I have used wp-cli to disable the wpgform plugin on your site. Unfortunately this is probably not enough to protect your site if the compromise has already modified core files your theme or your database. I highly recommend doing the following:

  • re-enable your site through the web configuration control panel for

  • disable all plugins
  • ssh/sftp to your host as user cvhpowerweb
  • backup up your existing site.
  • delete all files from your web folder
  • perform a complete install of wordpress to your web folder
  • reinstall updated plugins from source
  • carefully review wp-content folder for modified files or executable code in your uploads folder before restoring this folder to the new install
  • scan database for any signs of compromise before restoring mysql access credentials in wp-config.php

Please login to add comments to this ticket.

Note: See TracTickets for help on using tickets.