False positive

  • Resolved Martin1

    (@martin1)


    3 weeks, 1 day ago

    Hi,

    I am letting WordFence scan outside my WordPress installation as well. I have Perfex CRM running outside the WP install and it has all been fine for years.

    But the last month WordFence started flagging 3 fonts as critical. They are a false positives, at least as far as I can tell. I sacnned them locally with Kaspersky as well just to make sure and they are fine.

    Is there a place I can email these three fonts so the people at WordFence can check them and mark them as false positives?

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support wfphil

    (@wfphil)

    3 weeks ago

    Hi @martin1

    Send an email to wftest@wordfence.com with the fonts attached in a ZIP file.

    Please put your forum user name martin1 in the subject field so I can find it.

    Make sure to let me know in a reply here that you have sent the email.

    Thread Starter Martin1

    (@martin1)

    2 weeks, 4 days ago

    Hi,

    I just send the reply with the three files.

    Thanks for taking the time to answer me and looking at the files.

    Have a great weekend.

    Plugin Support wfphil

    (@wfphil)

    1 week, 1 day ago

    Hi @martin1

    Apologies for the delay as we have been very short staffed lately.

    I can’t find the email searching for martin1

    Please send an email again to wftest@wordfence.com with the fonts attached in a ZIP file.

    Please put your forum user name martin1 in the subject field so I can find it.

    Make sure to let me know in a reply here that you have sent the email.

    Thread Starter Martin1

    (@martin1)

    1 week, 1 day ago

    Hi,

    I’ll try again. I hope this time it reaches you :-).

    Regards

    Thread Starter Martin1

    (@martin1)

    6 days, 23 hours ago

    Hi,

    I just send you the email with the files.

    Regards

    Plugin Support wfphil

    (@wfphil)

    4 days, 20 hours ago

    Hi @martin1

    Thank you for the update. I got them.

    The scan result is expected:

    Description: Raw compressed zlib file – occasionally used to store fonts or exports but may be an IOC (Indicator of Compromise)

    So it is describing them accurately that they may be font files, which they are, so therefore you can use the IGNORE option in the scan results.

    Thread Starter Martin1

    (@martin1)

    4 days, 3 hours ago

    But why doesn’t it flag all the other .z files? Only these three ones? That’s what confused me.

Viewing 7 replies - 1 through 7 (of 7 total)

You must be logged in to reply to this topic.