Malware

  • Resolved rbennett

    (@rbennett)


    8 years, 4 months ago

    Sucuri is saying that this file has malware

    wp-content/plugins/shortpixel-image-optimiser/class/wp-short-pixel.php

    php.backdoor.generic.045.05

    Please advise.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author ShortPixel

    (@shortpixel)

    8 years, 4 months ago

    Hi,
    thanks for your message!

    There are 2 possible reasons for this message:
    1) a false positive alert by Sucuri
    2) your server was compromised and some scripts are injecting malicious code in your WP plugins, including ShortPixel’s files.

    We tend to believe that 1) is the reason but if you want we could look into this further and make sure that our plugin’s code looks good.

    Feel free to contact us here if you wish.

    Thanks,
    Alex

    Thread Starter rbennett

    (@rbennett)

    8 years, 4 months ago

    Thanks. I will ask Sucuri to double check and let you know.

    Plugin Author ShortPixel

    (@shortpixel)

    8 years, 3 months ago

    Thank you! 🙂

    Plugin Author ShortPixel

    (@shortpixel)

    8 years, 2 months ago

    For those interested, we eventually received this reply from Sucuri:

    I’ve downloaded this file https://downloads.wordpress.org/plugin/shortpixel-image-optimiser.zip and scanned the plugin – no warnings. It looks like you’ve already fixed the issue caused by the name of on POST parameter, which together with several other signals triggered the php.backdoor.generic.045.05 warning.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Malware’ is closed to new replies.