Recently, we have been receiving an increasing number of requests for malware removal from sites that have older versions of Movable Type mixed in with their servers.


Server vulnerabilities not just WordPress vulnerabilities

At WordPress Doctor, we remove malware from hundreds of WordPress sites each year, and we have recently received a number of complaints from sites that have been infected with malware.

The site was created using Movabale Type in the past, but at some point the site was converted to WordPress, and the old Movable Type code is still on the server.

We are seeing more and more cases where the old Movable Type code is still on the server.

(Other systems such as Movable Type may also have vulnerabilities.

As server management companies have warned, vulnerabilities may exist not only in WordPress, but in other systems as well.

Examples
Notice of Vulnerability in Movable Type 4.0 or later

Even if you are not using that system, a program vulnerability can be exploited by an outside party to access the program itself, which can lead to site tampering or backdoors.

What to do

If you have a system other than WordPress on your server that is not in use, we recommend that you remove the programs from the server.

This security issue also applies to unused themes and plugins. We recommend that you deactivate and remove any unused WordPress themes and plug-ins as much as possible.

If your site is infected with malware, you can use the plugin to scan and remove the malware.
Free] WordPress:Malware Scan & Security Plug-in [Malware and Virus Detection and Removal].

Related Posts:

  1. How to Prevent WordPress Site-to-Site Malware Infection
    Taking advantage of the convenience of being able to operate multiple domain sites under a single server contract, malware today often analyzes the server folder structure and spreads infection from one site to the folders of other sites (domains)....
  2. 5 operations that are at high risk of WordPress sites being hacked and tampered with.
    We will explain the five most dangerous ways to operate a WordPress site that can lead to it being hacked, defaced, sent to another site, or in the form of embedded malware. We hope that you will use this information as a lesson to the contrary....
  3. Is a WordPress site restored from a backup prior to malware infection safe?
    WordPress Doctor received the question, “Is a WordPress site restored from a backup prior to a malware infection safe?” This section explains whether or not a WordPress site restored from a backup prior to a malware infection is safe....
  4. What to do if you have multiple WordPress sites on your server and find that they are infected with malware
    If you have multiple WordPress sites on your server and find that they are infected with malware, here is what to do....
  5. What is Japanese SEO Spam, a type of WordPress malware?
    We will explain about Japanese SEO Spam, which is a malware that embeds fake Japanese product sites in WordPress....
  6. What to do for your site users when WordPress is hacked, tampered with, or hijacked.
    This page explains how to respond to users (those who use the site) when there is a possibility of damage to users who visit the site, such as being redirected to another site, being sent to a sweepstakes site, or downloading malicious files due to WordPress tampering. This page explains how to respond to users (those who use the site)...