The Federal Office for Information Security has issued a warning about the security vulnerability and advises WordPress users to check their sites for signs of a breach.

Attack on the Sailing-Amira

Global Security Vulnerability in WordPress Website Software / Reports and Images Have Disappeared

Our website has also been affected by the global wp2shell security vulnerability in the WordPress content management system. “During a security audit, we found concrete evidence that your WordPress installation was compromised by this attack and that files and/or databases have been affected,” our web host informed us. Attackers may have viewed, modified, or deleted data from our website, Sailing-amira.de. “This particularly affects passwords and access credentials (e.g., API keys, tokens) for all programs and plugins…”

It’s clear that we need to act immediately. Among other things, the web host strongly recommended that we restore the data to its July 18 state and allow them to install a security update. We did just that. Unfortunately, some reports were lost in the process, and edited images were deleted from the media library. We’ve also been experiencing certain other issues since then. We’re working to resolve these as quickly as possible and restore any lost content.