How to fix a vulnerability in wordpress?

Question

Burglary protection

Every time someone manually hacks a wordpress site. The engine and all plugins have been updated. How to fix the vulnerability? What could be the problem?
Here is an example of queries that turned out to be decisive in the hack:

"POST /wp-admin//update.php?action=upload-plugin HTTP/1.1" 200 31285 "-" "python-requests/1.1.0 CPython/2.7.3 Linux/2.6.32-279.el6.x86_64" "-"
"GET /wp-admin/plugins.php?action=activate&plugin=wpppm%2Fwpppm.php&_wpnonce=8a91a1c70d HTTP/1.1" 302 0 "-" "python-requests/1.1.0 CPython/2.7.3 Linux/2.6.32-279.el6.x86_64" "-"

Answer 1

Vulnerability in fake wpppm plugin.
Delete the folder or files that contain wpppm in the name.
wpmarketingbuzz.com/wordpress-malicious-plugin-wpp...

Answer 2

Lock access to the wp-admin folder with a password in .htpasswd. But most likely, some nonsense has already settled in one of your files (or in many files), maybe in the same update.php that is accessed by the hacking script or another one that you did not mention in the log. Download the latest WordPress distribution and if nothing has been changed in the core, compare + roll the latest version over with the replacement of files, leaving the config. Ideally, you need to manually wool everything, because this will not remove possible trojans lying in other files. Typically, malicious code is encrypted, so it clearly stands out from the rest of the contents of the files.

Answer 3

Break your passwords, you've been ripped off.