my accounts been stolen
-
please help me, someones changed the password and removed my email on my wordpress site
-
Hi there,
Can you please let me know your site’s address so I can point you in the right direction of getting support?
Please note that these forums are for WordPress.com hosted sites only. If your site is using the open source WordPress.org software you need to seek help at these forums:
-
The exact same thing happened to me. Edpharm.top took over my WordPress account, removed my recovery email address and set up an automatic forward [that’s not the technical term, but the techinical term escapes me now]. I had set up my WordPress account via an outside web server from their link to WordPress, but it was NOT set up as a sub-domain on the outside server. It was completely independent and operated in WordPress.
My WordPress website is:
http://www.fryfamilyhistory.org/preserve/
It had a ton of content. Is there any way to recover it?
And get rid of Edpharm?
Note, I had to set up a new WordPress account to post this complaint. My last email from WordPress was December 12, 2018. The total email read:
WordPress ((email visible only to moderators and staff))
To:you Details
Howdy! Your site at http://www.fryfamilyhistory.org/preserve has been updated automatically to WordPress 4.2.22.For more on version 4.2.22, see the About WordPress screen:
http://www.fryfamilyhistory.org/preserve/wp-admin/about.phpWordPress 5.0.1 is also now available. Updating is easy and only takes a few moments:
http://www.fryfamilyhistory.org/preserve/wp-admin/update-core.phpIf you experience any issues or need support, the volunteers in the WordPress.org support forums may be able to help.
https://wordpress.org/support/Keeping your site updated is important for security. It also makes the internet a safer place for you and your readers.
The WordPress Team
Did WordPress 4.2.22 have some kind of flaw or backdoor?
-
The same thing happened to me. My WordPress account was taken over by edpharm.top. They also removed my WordPress recovery email address. I set up a temporary account today in order to post this comment.
Is there any way to recover my wordPress account? It had a great deal of content.
My last email from WordPress was December 12, 2018 from ((email visible only to moderators and staff)): “Howdy! Your site at http://www.fryfamilyhistory.org/preserve has been updated automatically to WordPress 4.2.22.”
-
I was able to cut off the forward on the email above, but it still exists from the address below:
-
Logan169,
Hello, I’m sorry to hear that you are having trouble with your website. However, your site is not hosted with WordPress.com. It is a site using the open source WordPress software but hosted elsewhere. WordPress.com staff can only assist with sites that are hosted on our servers.
http://wordpress.org/support/ is a great resource for sites using the open source WordPress software. Particularly helpful is the forum at: https://wordpress.org/support/forums/. Your webhost’s support team may also be able to assist.
-
My blog *WAS* hosted on WordPress servers. Go to the Internet Archive and look at the following file, for example:
https://web.archive.org/web/20171016012917/http://www.fryfamilyhistory.org/preserve/
Then look at the source code.
I believe the problem arose when WordPress notified me of a change in theme on 12/12/18. My email *from WordPress* read as follows:
/***********************************************/
From: WordPress (wordpress{at}fryfamilyhistory.org)
To: you >DetailsHowdy! Your site at http://www.fryfamilyhistory.org/preserve has been updated automatically to WordPress 4.2.22.
For more on version 4.2.22, see the About WordPress screen:
http://www.fryfamilyhistory.org/preserve/wp-admin/about.phpWordPress 5.0.1 is also now available. Updating is easy and only takes a few moments:
http://www.fryfamilyhistory.org/preserve/wp-admin/update-core.phpIf you experience any issues or need support, the volunteers in the WordPress.org support forums may be able to help.
https://wordpress.org/support/Keeping your site updated is important for security. It also makes the internet a safer place for you and your readers.
The WordPress Team
/***********************************************/
Moreover, I always logged into WordPress, not my main server, to maintain my blog and used wp-admin to make edits and updates.
I just want my files back.
-
That email is not about a change of theme, but is an email send from your website informing you about an automatic upgrade. As Rootjosh already said, your site was using the free version of wordpress.org.
According to whois.net your site is hosted by ipage.com -
Hi there,
fryfamilyhistory.org has never been hosted on WordPress.com’s servers.
The email you quote above mentions a WordPress version number – WordPress.com does not use software version numbers, and we never send out notification emails when we do a software update behind the scenes. That email is sent out by the WordPress software on your site itself, as evidenced by the FROM email address, wordpress{at}fryfamilyhistory.org. Had the email been from us at WordPress.com it would have been from a @wordpress.com address.
If you scroll down on the Archive.org link you gave you’ll also see it shows the WordPress.ORG link in the meta widget at the bottom, and the “Powered by WordPress” footer text links to the WordPress.org website, not WordPress.com. You would not see those things if that snapshot was for a WordPress.com site.
So we have never had any of your content on our servers, and we have no way of helping you with this. Based on your domain’s Whois info and IP address that site is hosted with https://www.endurance.com/, and a historic DNS lookup at https://securitytrails.com/domain/fryfamilyhistory.org/history/a shows the site has been with that provider since 2009. Please contact them directly for help with this.
- The topic ‘my accounts been stolen’ is closed to new replies.