WordPress core file modified: wp-includes/functions.php and upgrade.php

  • Resolved GND13

    (@gnd13)


    10 years, 5 months ago

    http://www.samanthabennett.com.au

    Word fence found code change problem in wp-admin/includes/upgrade.php

    Original

    if ( is_wp_error( $result ) )
    die( $result->get_error_message() );

    It was Modified to

    if ( is_wp_error( $result ) ) {
    echo $result->get_error_message();
    exit(1);

    Also, problem on wp-includes/functions.php
    Original code
    </body>
    <?php
    die();
    }

    Changed to
    </body>
    <?php
    exit(1);
    }

    Is this of concern?

    https://wordpress.org/plugins/wordfence/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author WFMattR

    (@wfmattr)

    10 years, 5 months ago

    This one is should be ok. We have seen this a couple of times before, from modifications made by a host (or the software they use), for “one click” installers — this may help their automatic upgrade process determine when upgrades are successful.

    (Edit) You can safely click the link to ignore these two files until they have changed. You may see the same notice again, when the next upgrade happens, but this would also let you see if there are other malicious modifications, if there ever were any.

    -Matt R

    Thread Starter GND13

    (@gnd13)

    10 years, 5 months ago

    Thanks.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘WordPress core file modified: wp-includes/functions.php and upgrade.php’ is closed to new replies.