There is a new WordPress vulnerability affecting sites, and I bring you this news because four of the sites I manage have been affected by this in the past. The vulnerability allows hackers to embed code in the header of a hacked WordPress site. This malicious code then redirects visitors to a variety of sites which do nasty things, like install malware.
All of the sites we manage are protected by Sucuri, who posted a blog post and bulletin about this exploit here: https://blog.sucuri.net/2016/05/wordpress-redirect-hack-test0-default7.html. Sucuri, the plugin provides protection against this malicious code.
A great thanks to
If your site has been affected by this exploit or any other hack, we suggest you take steps to clean up the site immediately or contact us for help.