• Resolved matt.hall

    (@matthall-1)


    Last week, I discovered this same hack on a site we host. Quite elaborate! I was quite surprised to see that the WordFence scanner did not catch it. The WF plugin was up-to-date. The only item in the “problem found” email from WordFence was a medium risk plugin upgrade that was available. Is there a setting I need to enable so that the scanner can find this type of vulnerability?

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @matthall-1, thanks for reaching out!

    The malware detection signature related to this blog post was released for all Wordfence product levels by July 23rd, so I would expect your sites to have been protected by last week. I would just double-check that you don’t have any issues reported when trying to manually refresh rules using the button in Wordfence > All Options > Advanced Firewall Options > Rules. Issues with that or general file reading/writing could prevent new rules and signatures from coming through.

    If plugin functionality seems fine, Wordfence is on the latest version, and something seems to have still made it through, please send files or a brief report to samples @ wordfence . com containing a little background information so our team can take a look.

    Many thanks,
    Peter.

    Thread Starter matt.hall

    (@matthall-1)

    Thanks, @wfpeter

    I appreciate the response and tip. The rules seem to be coming through fine. I just sent in an email to the team. Thank you!

    Plugin Support wfpeter

    (@wfpeter)

    Hi @matthall-1, no worries at all.

    If the samples turn out to match the ones our scan should catch, it’s possible for the scan to be excluding certain directories, or that it’s been having trouble running/completing. In that case, it may assist us to see a diagnostic report from your site but won’t get ahead of myself.

    Let us know if you need further assistance moving forward,
    Peter.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.