Support » Plugin: Wordfence Security - Firewall & Malware Scan » Changes to files in wp-includes

  • Resolved tokyomagic


    Hi there,

    I keep finding randomly named .php files in my wp-includes folder. After deleting them they seem to re-appear every few days. Any idea’s what could be causing this? I have a file on my desktop if anyone needs to look at it.

    many thanks,


Viewing 1 replies (of 1 total)
  • Plugin Author WFMattR


    Hi Paul,

    It is possible that the host has something that creates these unusual files (especially if it’s a “Managed WordPress” hosting plan), but it’s also possible the site has been hacked. We have a guide for cleaning hacked sites here:
    How to clean a hacked website

    We could take a look at the code in the file, but please don’t post it here directly ( asks us not to) — but it is ok to post a copy on a site like, and just post the link here.

    -Matt R

Viewing 1 replies (of 1 total)
  • The topic ‘Changes to files in wp-includes’ is closed to new replies.