Plugin reporting trusted plugin as dangerous

Resolved SteveHale
(@stevehale)

4 years, 5 months ago

Your plugin is reporting the plugin, or it’s PHP, wp-mail smtp as dangerous.

There is no public facing page for the plugin as it works in the WP dashboard for sending mail from forms using SMTP.

Surely this plugin is safe as it is used a lot to hanlde SMTP mail.

Please advise

Regards

Steve B

Viewing 9 replies - 1 through 9 (of 9 total)

Plugin Author alexandergull
(@alexandergull)

4 years, 5 months ago

Hello @stevehale
Thank you for coming back.
Probably some code was changed and these changes were not included in standard WordPress distribution.
To let us know the reason please tell me your website name I will check the scan results.

Thread Starter SteveHale
(@stevehale)

4 years, 5 months ago

Hi Alexander

The web site is : https://completebuildingsolutions.co.uk

Regards

Steve B

Plugin Author alexandergull
(@alexandergull)

4 years, 5 months ago

I found the plugin public page: https://ru.wordpress.org/plugins/wp-mail-smtp/

The file

/wp-content/plugins/wp-mail-smtp/vendor_prefixed/phpseclib/phpseclib/phpseclib/Common/Functions/Strings.php

is modified from origin.

Can you send this file for analysis? https://cleantalk.org/help/files-analysis

Tell me when it is done.

Thread Starter SteveHale
(@stevehale)

4 years, 5 months ago

OK. The file has been sent.

Steve

Plugin Author alexandergull
(@alexandergull)

4 years, 5 months ago

Thank you. The files you have sent are safe.
We will contact you within 48 hours to inform you why the file is on list.
WBR

Thread Starter SteveHale
(@stevehale)

4 years, 5 months ago

Thank you

Regards

Steve B

Thread Starter SteveHale
(@stevehale)

4 years, 5 months ago

It is now 5 days later and long after your “48 Hours” to come back to me.

I am STILL getting warning emails about this good file.

Please can you advise

Regards

Steve B

SergeM
(@serge00)

4 years, 5 months ago

Hello, @stevehale.

Sorry for the late reply. The files are safe indeed. The scanner triggered on the line containing “base64_decode” specifically.

Please, mark them as safe in the scanner results in your website backend:
• WordPress Admin Page —> Settings —> Security by CleanTalk —> Malware Scanner

Did it help?

Plugin Author alexandergull
(@alexandergull)

4 years, 5 months ago

We haven’t heard back from you in a while, so I’m going to mark this as resolved – if you have any further questions, you can start a new thread.

Viewing 9 replies - 1 through 9 (of 9 total)

The topic ‘Plugin reporting trusted plugin as dangerous’ is closed to new replies.