Title: Malware in Cache File only
Last modified: August 21, 2016

---

# Malware in Cache File only

 *  [BobIMG](https://wordpress.org/support/users/bobimg/)
 * (@bobimg)
 * [12 years, 1 month ago](https://wordpress.org/support/topic/malware-in-cache-file-only/)
 * I have a site where I get a warning roughly every 24 hours about malware being
   on the site. In looking at the file it is always in the cache file. This is an
   example of the format, although the actual cached post is always different:
 * * File contains suspected malware URL: /home/****/public_html/wp-content/wfcache/*******
   ~~~~_wfcache.html
 * Simply clearing the Falcon Engine Cache and rerunning the WF scan will give the
   site a clean bill of health. I have enabled all of the scanning options and nothing
   is found. Any ideas?
 * [https://wordpress.org/plugins/wordfence/](https://wordpress.org/plugins/wordfence/)

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Thread Starter [BobIMG](https://wordpress.org/support/users/bobimg/)
 * (@bobimg)
 * [12 years, 1 month ago](https://wordpress.org/support/topic/malware-in-cache-file-only/#post-5087045)
 * This issue has been continuing to present itself. The site in question is using
   the SAICO theme. Because the cache files are always the ones infected, I realized
   that the threat must be accessing the site externally (not through a backdoor
   logon, etc.). I found that this theme has a vulnerability which was announced
   last October. It allows for an arbitrary file upload. We’ll get to work picking
   out a new theme. Hopefully, WordFence will be able to help catch vulnerabilities
   such as these in the future (although it is already an amazing plugin!).
 *  [Geetar](https://wordpress.org/support/users/geetar/)
 * (@geetar)
 * [12 years, 1 month ago](https://wordpress.org/support/topic/malware-in-cache-file-only/#post-5087087)
 * I had the same problem, and the issue was coming from an external link to a hacked
   website.
 * Cheers

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Malware in Cache File only’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [Geetar](https://wordpress.org/support/users/geetar/)
 * Last activity: [12 years, 1 month ago](https://wordpress.org/support/topic/malware-in-cache-file-only/#post-5087087)
 * Status: not resolved