octalmage on "Is my webserver compromised ?"

Hi CooLMinE,

Are you using the latest version of RevSlider? There's been multiple vulnerabilities in that plugin discovered and exploited over the past year. For example:

http://blog.sucuri.net/2014/12/revslider-vulnerability-leads-to-massive-wordpress-soaksoak-compromise.html

This could be how they're getting in!

Make sure to look in all of your themes. Many themes ship with this plugin and they don't have a way to notify you of updates, I see this all the time.