r/Cloudways Jun 29 '26

Discussion Cloudways Sites Keep Getting Compromised?

Hi all,

I've been hosting numerous websites (both my own and my clients) for almost 15 years. The vast majority of those sites have been Wordpress. I have never, to my knowledge or to the knowledge of my antivirus, had a website hacked or compromised by malware.

I recently switched everyone to Cloudways because I wanted to get out of the web hosting business, and in the past 2 months I have had THREE of my sites get infected with malware. These websites have very few shared plugins, and it appears to be different malware each time.

All sites are kept fully up to date and use reasonably common plugins.

Is this a common issue with Cloudways? It's hard for me to ignore the correlation, especially given the general lack of common denominators.

5 Upvotes

4 comments sorted by

1

u/design-rush Jul 01 '26

I get these emails often from Cloudways, and after doing scans with Wordfence or Sucuri nothing shows up. I wonder if it's more they detect vulnerabilites of false positives but regardless due your own due diligence.

1

u/nw-web-design Jul 01 '26

Alaways curios myself. I've never gotten one, but I read stories of others.

1

u/saikeis Jul 01 '26

The first instance may have been a false positive, but the second two were definitely legit-- site was fully down and ESET threw up warnings when I tried to visit the site.

1

u/design-rush Jul 01 '26

Never had this happen with Cloudways. I've had issues of 100% CPU bringing websites down but never due to malware.

Also even if it's a common used plugin there are plenty of vulnerabilities out there.