Epic Theme – ajax Spam

[Alfredo Sanz]

After installing your template “epic” I receiv HUNDREDS of spam emails with content that I attached.

I had to delete the file epic/data/ ajax.php to stop receiving messages.

—-

Delivered-To: XXX
Received: by 10.64.224.206 with SMTP id re14csp7542iec;
Sun, 1 Sep 2013 03:51:41 -0700 (PDT)
X-Received: by 10.66.196.110 with SMTP id il14mr2134232pac.130.1378032701413;
Sun, 01 Sep 2013 03:51:41 -0700 (PDT)
Return-Path: XXX
Received: from XXX (XXX [50.87.144.95])
by mx.google.com with ESMTPS id xx4si6489314pab.284.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 01 Sep 2013 03:51:41 -0700 (PDT)
Received-SPF: pass (google.com: domain of XXX designates 50.87.144.95 as permitted sender) client-ip=50.87.144.95;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of XXX designates 50.87.144.95 as permitted sender) smtp.mail=XXX
Received: from alfredo by XXX with local (Exim 4.80)
(envelope-from XXX)
id 1VG5Fs-0000mn-Lj
for XXX Sun, 01 Sep 2013 05:51:40 -0500
To: XXXX
Subject: Message from lwondxkkp
X-PHP-Script: XXX for 113.123.166.173
From: lwondxkkp XXX;
Reply-To: XXX
Message-Id: XXXX;
Date: Sun, 01 Sep 2013 05:51:40 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – XXX
X-AntiAbuse: Original Domain – XXX
X-AntiAbuse: Originator/Caller UID/GID – [31574 500] / [47 12]
X-AntiAbuse: Sender Address Domain – XXX
X-BWhitelist: no
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home3/alfredo/public_html/minoristasdezaragoza.es/pruebas/wp-content/themes/epic/data/ajax.php
X-Source-Dir: tienetiendaonline.com:/public_html/minoristasdezaragoza.es/pruebas/wp-content/themes/epic/data
X-Source-Sender:
X-Source-Auth: alfredo
X-Email-Count: 3
X-Source-Cap: YWxmcmVkbzthbGZyZWRvO2dhdG9yMzA3Ni5ob3N0Z2F0b3IuY29t

Name: lwondxkkp

Email: XXXX

Message: alwondxkkp

—-

[7Theme Support]

Hello, thank you for your notification.

Thats really new for us. We have thousands of installations of this file, and no problems with that. But we checking that, its very important for us.

If you want you can use the “Contact form 7” plugin meanwhile, its fully compatible with our themes.

[Author]

Posts