SECURITY FINDING

Batch of auto-published SEO-spam posts

What it is

An unusually large batch of posts was found that's full of external links and spam keywords (gambling, pharma, loans) — typically auto-published by an infection to inject SEO spam into the site.

How to fix it

Review and delete the spam posts, then do a full cleanup to remove whatever is generating them, or they'll be re-created. Back up before mass-deleting.

In depth

We detected that your site is automatically creating and publishing fake articles containing links to gambling, medications, or loans, which means your website has been compromised by malicious code. This is a serious issue because it destroys your visitors' trust, and Google may completely block your site or significantly lower its ranking in search results, hurting your business. The first thing you need to do is create a full backup of your site from your hosting control panel before touching anything. After that, you need to manually delete all of those fake articles from WordPress, review who has access to your account, and change all administrator and FTP passwords. Finally, you need to install a security plugin like Wordfence to clean up the remaining malicious code, scan suspicious files, and block future attacks, because simply deleting the articles without removing the virus will cause them to reappear immediately.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.