Freelance Theme Hacked – What Should To Do?

[Herman]

What alternative theme can I use to replace the Freelance theme so I don't have to spend time re-customizing?
Someone hacked the theme and my hosting provider is asking to replace it immediately.

Thx

http://www.rsrmarketing.com

[Christoph]

Hi,

why don't you just replace the infected files?
While not knowing what exactly happened, chances are pretty slim anybody hacked a theme.

More likely you have a vulnerable plugin, allowed php uploads, etc...

Without taking care of that, you will just get re-infected.

---

https://www.christophherr.com | Genesis Customizations | Buy me a coffee

[Victor Font]

If you need help, contact the folks at https://sucuri.net/

---

Regards,

Victor
https://victorfont.com/
Call us toll free: 844-VIC-FONT (842-3668)
Have you requested your free website audit yet?

[Derek]

The freelance theme has been unsupported for 6 years now. Last time this theme was updated was on 11/15/10. I verified this as I'm a pro plus member. This could be 1 reason why your blog was hacked.

Code changes all the time both on WordPress version release's and Genesis Framework release's so not having updated theme is just bad. Considering WordPress and StudioPress have come a long way in regards to features/design/coding standards. Just get a new theme from the marketplace here. Trust me, all themes now showing in the marketplace will work well and have a ton more security.

Yes this will cost you money in having to purchase a new theme but if you login to your account on the homepage then search for a theme to purchase, you will get a discount on the theme as you are an existing customer. http://my.studiopress.com/themes/

I'd suggest you look into some wordPress security plugins as well for extra protection. Google Search WordFence for WordPress is one plugin but there are others out there.

---

~’;’~

[Herman]

Thx Christoph and Derek..the them definitely got hacked because I see redirect code added to multiple posts.
Why doesn't studio press update old themes or say "discontinued"?

I tried a new theme however there was too much customization so I downloaded a new freelance theme and have added word fence.
Fortunately I could still access the old site and built the new one in a subdirectory. And I could use payback machine to retrieve the original content that had been hacked.

My lesson.. keep a recent backup in case your site gets hacked.

[Christoph]

Herman,

let me stress again that regardless where you see unwanted / malicious code, a child theme is the least likely point of intrusion.
There is just not much code that could be exploited from the outside.
I´m not defending the Freelance theme or saying it doesn't happen.
Outdated or vulnerable plugins, unsecured directories, weak passwords, etc. are far easier to exploit.

Please don't think all is well because you are using a WordPress installation in a different directory.
Make sure to check every directory and every file in your account, change all your passwords (including cpanel/database/ftp) because one backdoor is enough to re-infect everything all over again.

---

https://www.christophherr.com | Genesis Customizations | Buy me a coffee

[Herman]

Christoph..good to know because I'm using the same theme
however I'm going to change cpanel login also based on your recommendation.

[Derek]

Studiopress removed it from there lists of themes in the my studiopress page. When I login to my account since Pro Plus I see 87 themes I can download and use and all of them are up-to-date with the current WordPress and Genesis Framework standards. There is a link I click on that will show the themes that have been removed and unable to be purchased.

When they made this decision to not update it and basically gave up on the theme, they should of emailed existing clients who purchased this theme to give them a heads up or a bigger discount if they purchased a new theme within 48hours. That's how I'd handle that but I do not work for StudioPress and those decisions is up to the paid staff or just Brian himself. Use the contact form to speak to a paid staff member about this issue. You are not the only one who may run into this issue as well.

If you can't find a theme in the theme marketplace, There are other 3rd party developers who have themes created for the framework. Let's know the niche your blog is in and try to describe your dream theme. Perhaps we can give you some good suggestions to help you out. FYI, https://list.ly/list/ZLH-third-party-genesis-child-theme-sellers

---

~’;’~

[Author]

Posts