My blog aaronselias.com recently got hacked with a “malicious redirect”. Probably, the hack happened via a compromised plugin. It seems the issue is now fixed but please do me a favor and go to that site. At least on my computer the redirects no longer happen whereas they used to appear in about 70% of requests earlier. Let me know if you still get automatically redirected to some porn or gambling website.

EDIT: This is still ongoing. If anyone has experience with such problems, please comment below.

EDIT 2: I do not know if I have fixed the issue. The root cause seems to have been a bug the company behind WordPress did not want to acknowledge. There were a few admin accounts on that blo, created by hackers or bots, which I deleted. I also removed code that called an external script. Once the script was triggered, execution worked via a cookie, which is why the site seemed to work fine in Safari but not in Firefox, thus the edit message above. I reinstalled the core WordPress files. Let’s see if the site remains stable. In the worst case, I will have to reinstall from scratch. One open question is if there is anything hidden in the database but so far I could not find anything.

EDIT 3: The site seems stable again. I have added a Cloudflare bot protection screen as a safety precaution.

EDIT 4: I think the likely culprit is an outdated plugin I had used for maintaining a list of links. I also used it on this blog, so I removed it.