Re: https://www.virustotal.com/nl/url/7a09b6b292a0198e2db99ec46e6aeb42184e0994765983f2a06ab7c903f6cef2/analysis/1457976648/
Re: Known javascript malware. Details: http://sucuri.net/malware/entry/MW:JS:GEN2?web.js.malware.fake_jquery.001
according to: https://sitecheck.sucuri.net/results/aboutworldlanguages.com
WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.
akismet latest release (3.1.8)
http://akismet.com/
-http://aboutworldlanguages.com/slavic-branch
Detected libraries:
flowplayer - 3.2.6 : -http://aboutworldlanguages.com/wp-content/themes/localnews/functions/shortcodes-ultimate/js/flowplayer-3.2.6.min.js
Info: Severity: medium
https://github.com/flowplayer/flowplayer/issues/381
jquery-migrate - 1.2.1 : -http://aboutworldlanguages.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
jquery - 1.11.3 : (active1) -http://aboutworldlanguages.com/wp-includes/js/jquery/jquery.js?ver=1.11.3
(active) - the library was also found to be active by running code
2 vulnerable libraries detected
Re: http://www.domxssscanner.com/scan?url=http%3A%2F%2Faboutworldlanguages.com%2Fwp-includes%2Fjs%2Fjquery%2Fjquery-migrate.min.js%3Fver%3D1.2.1
and see the malcode inside: http://www.domxssscanner.com/scan?url=http%3A%2F%2Faboutworldlanguages.com%2Flanguages-a-z
starting with script>var a=‘’; setTimeout(10) etc.
polonus