Support » Plugin: Wordfence Security - Firewall & Malware Scan » File Type: Not a core, theme, or plugin file from wordpress.org.

  • Resolved laurpm

    (@laurpm)


    Hello,
    I have 3 messages from Wordfence Scan saying that:

    Filename: wp-content/cache/wpo-cache/horecaluna.ro/product-sitemap.xml/index.html
    File Type: Not a core, theme, or plugin file from wordpress.org.
    Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: \x0a\x09\x09<loc>https://horecaluna.ro/controler-electronic-50-150c-230vac-ntc-ptc-dixell-xr70cx-5n0c3-378221/</loc>
    
    The issue type is: Spam:XML/no-vow-dig.10123
    Description: Sitemap content resembling that found in spam infections
    Filename: wp-content/uploads/rank-math/rank_math_a5a8c26ccf954f59109b1dd2ee662987.xml
    File Type: Not a core, theme, or plugin file from wordpress.org.
    Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: \x0a\x09\x09<loc>https://horecaluna.ro/controler-electronic-50-150c-230vac-ntc-ptc-dixell-xr70cx-5n0c3-378221/</loc>
    
    The issue type is: Spam:XML/no-vow-dig.10123
    Description: Sitemap content resembling that found in spam infections
    Filename: wp-content/cache/wpo-cache/horecaluna.ro/product-sitemap1.xml/index.html
    File Type: Not a core, theme, or plugin file from wordpress.org.
    Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: \x0a\x09\x09<loc>https://horecaluna.ro/controler-electronic-50-150c-230vac-ntc-ptc-dixell-xr70cx-5n0c3-378221/</loc>
    
    The issue type is: Spam:XML/no-vow-dig.10123
    Description: Sitemap content resembling that found in spam infections

    Could you please tell me if this is something I should worry about?

    Thank you!

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author WFSupport

    (@wfsupport)

    Thanks for reaching out.

    Can you send the 3 files to wftest [at] wordfence [dot] com? Respond here when you do so I know to look for them. Please include your forum username (@laurpm) in the subject line and a link to this post in the message body.

    Thanks

    Tim

    Thread Starter laurpm

    (@laurpm)

    Hello,
    It seems that DELETING the product linked to that xml from the sitemap, solved the issue. Scanned the website 10 times at least and no issues were found.
    I will keep you posted if anything suspect happens again.
    Thank you!

    L.E. Scanned the files on my computer with Bitdefender Gravity Zone and online with VirusTotal and nothing was found

    • This reply was modified 3 months, 1 week ago by laurpm.
    Plugin Author WFSupport

    (@wfsupport)

    Thanks for letting us know. I suspect it is a false positive but I’m hesitant to say that without having seen the files themselves.

    I’ll close the case but feel free to open a new one if something happens again. We’re always glad to help.

    Tim

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.