Alert not generated after replacing plugin file manually

  • Resolved pppusl

    (@pppusl)


    10 years, 9 months ago

    Hi guys,

    I’m wondering why Wordfence did not generate an alert and did not capture (via manual scans) a modification I’ve made manually to one of my plugins.

    I’ve changed wp-topbar.php file from the plugin “WP TopBar”. The developer of the plugin sent me a test version, and I’ve replaced the files manually via FTP.

    The repository version of wp topbar plugin is 5.29, mine is a 5.30 test version.

    I expected an alert from Wordfence about changing a php file (at least the size of the file is different from the original one) but the scans did not reveal any alert.

    My wordfence version is 6.0.15 and the site is http://www.ppusl.ro

    Thank you very much,

    https://wordpress.org/plugins/wordfence/

Viewing 1 replies (of 1 total)
  • Plugin Author WFMattR

    (@wfmattr)

    10 years, 8 months ago

    Wordfence compares plugins to the same version that was released on wordpress.org, so if you have a pre-release version, there is not a released copy to compare it to yet.

    In this case, I believe the file is scanned the same way that premium plugins or custom plugins would be scanned, for any sign of malicious code.

    If you want to verify that it is being scanned, you can turn on the option “Enable debugging mode” on the Wordfence Options page, and run a scan, then search through the scan results for the filename, to see in which section it appears. (Make sure to turn the debugging option back off when the scan is done, as it stores a LOT of extra data.)

Viewing 1 replies (of 1 total)

The topic ‘Alert not generated after replacing plugin file manually’ is closed to new replies.