Hi @tharguienlaura, thank-you for getting in touch.
If Wordfence finds a discrepancy between a WordPress core file, or a wordpress.org repository plugin file compared to your installed version of that file, you’ll be presented with a “VIEW DIFFERENCES” button to compare them. Let us know what has been added/removed/changed from the file here if anything comes up.
Many thanks,
Peter.
Use Wordfence’s “View Differences” on wp-includes/version.php before worrying — a real content change matters more than a timestamp quirk after an update. If the diff shows unexpected code, replace wp-admin and wp-includes from a clean copy of your exact WordPress version, then review users, plugins, and mu-plugins. Confirm you are on a current security release afterward. Restoring those two folders is a first step, not proof the whole site is clean.
