0
Today, I got
A total of 2 possible successful probes were detected (the following URLs
contain strings that match one or more of a listing of strings that
indicate a possible exploit):
/wp-content/plugins/wptf-image-gallery/lib-mbox/ajax_load.php?url=../../../../wp-config.php HTTP Response 301
/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php HTTP Response 301
from Logwatch.
I did find / -name wptf-image-gallery -type d
on my server to remove it but there was no result.
What should I do now? How do I find the affected wordpress installation?