9

Hello Sir,
Our technical report, please check.
Thank you for the update that shed some light on the issue.

In the reports I can see that this jquery (1.11.3) library is vulnerable - http://rynantech.com/wp-includes/js/jquery/jquery.js?ver=1.12.4. Even though your WP instance and its plugins are up-to-date the library appears to be an older version:
Code:
mnbcc066@c22605 [~/public_html/rynantech.com]# wp core version
4.7
mnbcc066@c22605 [~/public_html/rynantech.com]# wp plugin status
12 installed plugins:
A ajax-search-lite 4.7.0
I akismet 3.2
A contact-form-7 4.6
A custom-sidebars 2.1.1.9
A disable-comments 1.6
A exploit-scanner 1.5.1
A polylang 2.0.12
A total-security 3.4.4
A wp-antivirus-site-protection 7.0.1
A wp-authenticity-checker-wac 1.0
A wp-google-map-plugin 3.1.9
A wordpress-seo 4.0.2

Legend: A = Active, I = Inactive

Thus I renamed the file from jquery.js to jquery.js_SUSPICIOUS

As for the error on the report https://www.virustotal.com/nl/file/32c4987dcc0d649c725e20b82483600748da7a56fbb4b5610fd868ff53e4c9ed/analysis/, it is related to a file named 00d3d5a3cf133.png that is not present on your account:
Code:
root@c22605 [/home/mnbcc066]# find . -name 00d3d5a3cf133.png
root@c22605 [/home/mnbcc066]#

You should check your local computer for such file and remove it.

What is strange is that every URL that does not exist redirects to this page with the posts:

http://nimb.ws/CY5g0t

I have added an .htaccess rule to redirect non-existent pages to the home of the site. Thus the URL http://rynantech.com/counter/?ad=13t6hujdkw85vwuzk5ipc1c7rxwf1dp6xi will now redirect to the home page. These are the rules in question:
Code:
root@c22605 [/home/mnbcc066/public_html/rynantech.com]# tail -n3 .htaccess
ErrorDocument 404 http://rynantech.com
Redirect 404 /counter/?ad=13t6hujdkw85vwuzk5ipc1c7rxwf1dp6xi/
Redirect 404 /counter/

Hence the above mentioned reports should not be an issue anymore. Still it would be best to consult with a security specialist regarding the issue. The reported issue is an applicaiton related one, rather than a server-side issue.

You can check if the site can be rescanned now and see if there are any other links reported.

Best Regards,

Georgi L.
Technical Support Supervisor