Is there a way to force all users to reset their passwords? I’ve got a hacked site and the malicious files are being put into the wp-content/forum-image-uploads/%user%/%year%/%month%/_thumbs folders. The permissions on those folders are all 755 so I’m assuming the user accounts have been compromised. But what the heck do I know?
Thanks for any advice you can offer.
A quick look through the WordPress plugin repository did turn up this one – http://wordpress.org/plugins/emergency-password-reset/ – although I can not vouch in any way for it of course. Actually just typing something like ‘change password’ into the plugin search turns up quite a few one or more of which may be helpful.
Thank you sir. So if I understand it correctly, changing the WordPress password also changes the SimplePress password, is that right?
there is no simple press password… no users either… all belong to wp… so yes, change the the wp password and simple press just follows along…