Title: Multiple false positives for core files
Last modified: August 20, 2016

---

# Multiple false positives for core files

 *  [Vizou](https://wordpress.org/support/users/vizou/)
 * (@vizou)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/multiple-false-positives-for-core-files/)
 * I just ran a scan and Exploit Scanner returned tons of legitimate core files 
   with messages like this :
 * wp-admin/themes.php
    Unknown file found in wp-includes/ or wp-admin/ directory.
 * Could this be due to .htaccess protection? First time this has ocurred with this
   plugin.
 * [http://wordpress.org/extend/plugins/exploit-scanner/](http://wordpress.org/extend/plugins/exploit-scanner/)

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Thread Starter [Vizou](https://wordpress.org/support/users/vizou/)
 * (@vizou)
 * [13 years, 4 months ago](https://wordpress.org/support/topic/multiple-false-positives-for-core-files/#post-3137007)
 * Update. After adding 3.5 hashes file to plugin, still getting false positives
   on :
 * wp-includes/class-wp-atom-server.php
    Unknown file found in wp-includes/ or wp-
   admin/ directory. wp-admin/options-privacy.php Unknown file found in wp-includes/
   or wp-admin/ directory.
 * as well as many others like this which says “see changes” then nothing shows 
   up in lightboxed window. After comparing files, nothing bad here.
 * wp-admin/post-new.php
    Modified core file
 * Seems to me that this plugin is due for a major upgrade… any response from author?
   It was a fave… not working now.
 *  [epawel](https://wordpress.org/support/users/epawel/)
 * (@epawel)
 * [13 years, 3 months ago](https://wordpress.org/support/topic/multiple-false-positives-for-core-files/#post-3137013)
 * The same issue here – many false positives e.g.
    wp-includes/js/tinymce/wp-tinymce.
   php Unknown file found in wp-includes/ or wp-admin/ directory. wp-includes/default-
   filters.php Unknown file found in wp-includes/ or wp-admin/ directory. wp-includes/
   feed-rss.php Unknown file found in wp-includes/ or wp-admin/ directory. wp-includes/
   feed-rss2.php Unknown file found in wp-includes/ or wp-admin/ directory. wp-includes/
   feed-atom-comments.php Unknown file found in wp-includes/ or wp-admin/ directory.
   wp-includes/feed-rss2-comments.php Unknown file found in wp-includes/ or wp-admin/
   directory.
 *  [mcramer](https://wordpress.org/support/users/mcramer/)
 * (@mcramer)
 * [12 years, 10 months ago](https://wordpress.org/support/topic/multiple-false-positives-for-core-files/#post-3137026)
 * I’m getting the same issue here. I just posted about it at wordpress.org/support/
   topic/work-with-wp-352. I pretty sure it happened as a result of upgrading WP
   to 3.5.2. Has anyone figured out a solution to this?
 *  [Matt Robinson](https://wordpress.org/support/users/mattyrob/)
 * (@mattyrob)
 * [12 years, 10 months ago](https://wordpress.org/support/topic/multiple-false-positives-for-core-files/#post-3137028)
 * You need updates a hashes file, you can get it here or wait for an update to 
   the plugin:
    [http://wordpress.org/support/topic/352-hashes?replies=1](http://wordpress.org/support/topic/352-hashes?replies=1)

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Multiple false positives for core files’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/exploit-scanner.svg)
 * [Exploit Scanner](https://wordpress.org/plugins/exploit-scanner/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/exploit-scanner/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/exploit-scanner/)
 * [Active Topics](https://wordpress.org/support/plugin/exploit-scanner/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/exploit-scanner/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/exploit-scanner/reviews/)

## Tags

 * [core files](https://wordpress.org/support/topic-tag/core-files/)
 * [exploit](https://wordpress.org/support/topic-tag/exploit/)
 * [false positive](https://wordpress.org/support/topic-tag/false-positive/)

 * 4 replies
 * 4 participants
 * Last reply from: [Matt Robinson](https://wordpress.org/support/users/mattyrob/)
 * Last activity: [12 years, 10 months ago](https://wordpress.org/support/topic/multiple-false-positives-for-core-files/#post-3137028)
 * Status: not resolved