Onesignal Sending Adult Push Notification from my site!

Just now I received a Push Notification from my website by Onesignal which having adult contents. I did not send these messages, but somehow it was showing my Domain name there. When I log in to my OneSignal Account, under messages section, the notification was there.

This notification is not sent by me, what is going on???

Is your site hacked by any nulled theme or plugin?

1 Like

Yes, this may be a reason because I have never heard anything about the sameā€¦

No, I am not using anything of that sort.

1 Like

@Astro @GulshanKumar Not nulled themes and plugins even the free plugins from WordPress directory do some nasty things.

For example, few months ago I was using AddtoAny Share Button Plugin and I noticed that it was loading an additional ad script of adsense whose publisher id was not same as mine.


So, it can be by some other plugins, right?

Use plugins (Free) from highly trusted sources only. If you want a function indeed try to find an alternate source rather than using plugins.
Important Plugins to run a WordPress site smoothly were:
1.) Akismet (Prevent Spam)
2.) Yoast (SEO)
3.) WP Optimize (Maintain a healthy DB)
4.) WP Forms (or) Contact Form 7 (Communication Channel)
5.) Subscribe to Comments Reloaded (Communication Channel)
6.) One Signal (Communication Channel)
7.) A site builder (Thrive Architect or Elementor)
8.) Social Share (Sumo or social pug)
9.) W3TC (WP Cache)
10.) Email Marketing (Thrive Leads or Optin Monster)

I think this is enough to run a site.