Widgeted Footer page hacked

[RitaRobinette]

Site using Serenity (old version) got hacked. I had permissions to read only on all folders except wp-content and wp authentication codes in place.

I didn't find anything in the forum about this so I thought I would share what I found out.

My client pointed out that there was malicious code on the home page of the site.

I did a search of all the datatables in the database and couldn't find anything.

Research online advised to do a site search

site:youdomain.com

This helped me identify the pages with the malicious code. When I went to those specific pages and looked at the source code, it showed it was located in the widgeted footer page.

So I uploaded my saved copy of the file to the site and that fixed it.

Of course, I did all the other security measures listed by WP and Studio press so hopefully this won't happen again.

I was wondering if anyone else had a similar issue and if so how they handled it.

Thanks.