WP Engine found malware on our site http://btlt.org that appears to be located and initiated from the database in conjunction with perhaps other areas. The malware causes redirects to popup ads and suspicious intent websites.
For those message templates, those can be edited in the Messages editor. So what you can do is look in phpmyadmin for the rows that have the 6 IDs listed, then go to edit those messages. You can even reset some of the templates right from the messages editor if they’re really messed up.
I can advise contacting Sucuri or another professional to help clean up the post and postmeta tables.
Viewing 1 reply thread
The support post ‘RTdoc malware’ is closed to new replies.
Have a question about this support post? Create a new support post in our support forums and include a link to this existing support post so we can help you.
Support forum for Event Espresso 3 and Event Espresso 4.