Make WordPress Core

Opened 5 years ago

Closed 5 years ago

Last modified 4 years ago

#45213 closed defect (bug) (invalid)

Very large network of hacked WordPress sites

Reported by: hansfer's profile hansfer Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Security Keywords:
Focuses: Cc:


Hi there,

I've discovered a very large network of hacked WordPress sites.

The site using the network for backlinks is:

Just check the backlink-profile of his site, he's ranking with 1000s of links from hacked WP sites, where he put fake blog posts on.

I recommend to make a Google web spam report his site ( as well:

Hate spam!

Attached a list of backlinks that are 99.9% hacked WordPress sites.

Best regards,

Attachments (1)

links-of-hacked-sites.txt (1.2 MB) - added by hansfer 5 years ago.
list of hacked WP sites

Download all attachments as: .zip

Change History (4)

5 years ago

list of hacked WP sites

#1 @peterwilsoncc
5 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Severity changed from critical to normal
  • Status changed from new to closed

Hello, and welcome to trac!

Trac is for reporting bugs and requesting enhancements to the WordPress open-source software. The exception being for security related issues, which shouldn't be reported here, and instead logged through

As open-source software, WordPress can't manage individual sites or their content. It's unfortunate but many sites are hacked due to out of date software or plugins.

As WordPress don't have any control over these sites, I am going to close this ticket as invalid. It sounds a little unfriendly but it's trac's way of recording the issue is outside of WordPress's control.

#2 @SergeyBiryukov
5 years ago

  • Component changed from General to Security

#3 @hansfer
5 years ago

Ok, sorry, can you please delete this ticket?

Note: See TracTickets for help on using tickets.