Plugin Support
WFAdam
(@wfadam)
Hello @flexer and thanks for reaching out to us!
If you could do me a favor to test for us, navigate to Wordfence > All Options > Advanced Firewall Options > Manually Refresh Rules. Once you refresh them, do another scan to see if these results show again.
Let me know what you find!
Thanks!
Thread Starter
Flexer
(@flexer)
Thanks @wfadam
Did and unfortunately teh results were the same
Daveed
Plugin Support
WFAdam
(@wfadam)
I checked with our QA team on this just to be sure.
It is safe to just “Ignore” these files from your scan.
You might have an earlier installation that stayed that way through the years or may even be running an old version of WPML in which your files are still stored in the wp-includes. In the later versions, this is stored in the wp-content. That is why the scan is alerting you.
Let me know if you have any questions!
Thanks!
Thread Starter
Flexer
(@flexer)
Thank you @wfadam
There are hundreds of files, do I need to ignore each one individually, or is there a way to do this to all of them?
I have quite a few other sites with WMPL and WF. I only updated this one to 4.6. The other ones are not showing this issue.
Daveed
Plugin Support
WFAdam
(@wfadam)
You could also disable the Scan wp-admin and wp-includes for files not bundled with WordPress in the Scan Options.
I would recommend checking with WPML to see if there’s a way to switch to using wp-content/languages/ for these files.
Thanks!
Thread Starter
Flexer
(@flexer)
Thanks @wfadam
I ended up chatting to WPML.org support and it was most likely an old install that did not update properly. We fixed it by moving the languages folder to the correct spot.
So ultimately WF helped me find an issue on the site I was otherwise not aware of. Unintended consequences 🙂
Thanks again,
Daveed
Plugin Support
WFAdam
(@wfadam)
Thanks for the update!
Glad you got it resolved!