Hidden Spam Meta Descriptions

Question

I have found out that a client's site (WordPress CMS) was somehow infected with spam / hacked and did some serious cleaning, updating and upgrading and cleaning cache. I used various tools and search queries. But somehow I still see spam data when I search for the two main words in the domain - see link to domain above - as meta descriptions for certain pages. I have not been able to find the source. Not all anyways. I wonder what I am missing. Google should have cleaned up its records since last week so there is probably still spam. How can I - without reverting to an older backup - find it? Where does all-in-one-seo store its data - used by client- ? Perhaps that is where the spam was added to the database.. Or where could the meta description be loaded from? So far I only found spam event calendar pages (WordPress plugin - link ), but those I removed and the plugin has also been updated. Really want this solved asap as I do not want it blacklisted and look bad in general

Answer 1

All-in-one SEO Pack stores data in the wp_postmeta table (or xyz_postmeta if your WP prefix is xyz_). Meta values that correspond to the plugin are prefixed in the meta_key column with _aioseop. Of particular interest in this case for <meta> tag spam will be the following meta keys:

_aioseop_title
_aioseop_description
_aioseop_keywords

A select like the one below should give you a fair idea of what you'll have to remove:

SELECT meta_id, meta_value FROM wp_postmeta WHERE meta_key LIKE '_aioseop_%'