-1
I think there was a backdoor created by the hacker which allowed them to bypass normal authentication.
- Wordpress 4.4.2 in apache2 with MySQL
- I install chkrootkit, rkhunter but finding nothing!
- I find in google http://www.wpbeginner.com/wp-tutorials/how-to-find-a-backdoor-in-a-hacked-wordpress-site-and-fix-it/ but without results.
5You should nuke the Wordpress files from orbit. Unless you can identify which backdoor was installed, this question, cannot be answered. – Ramhound – 2016-03-03T21:29:21.287
What a surprise. Wordpress gets hacked?! My advice, don't use Wordpress, just do it yourself! – Dave – 2016-03-04T09:58:39.670