• Resolved chrislee

    (@ccl1111)


    Directed here by Sucuri chat from the website.

    I have a WordPress site that all of a sudden started getting numerous failed login notifications (59). Went to the site & it needed updating of the WordPress core & plugins. Did those.

    In the Sucuri dashboard I now see warnings of:

    • Too many WordPress core files modifided. Showing only a few…
    • WordPress Core file modified (checksum does not match) – multiple instances

    What are my next steps now?

    Thanks!

    https://wordpress.org/plugins/sucuri-scanner/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Hello, you are still using the (old) premium plugin which was deprecated back in July/2014, you need to deactivate and delete that plugin and install the free (community) version [1], this new plugin includes several bugfixes, more than twenty new tools, better settings to control its functionality, five new file system scanners (which complement the main scanner included in the old version), and many more things.

    That message about “Too many WordPress core files modified […]” is part of that old code and was not included in the migration of the new plugin so I can not provide support to fix that (as I already explained above, the old plugin is deprecated). If you install the new plugin linked below you will not see these errors anymore.

    [1] https://wordpress.org/plugins/sucuri-scanner/

    Thread Starter chrislee

    (@ccl1111)

    Thank you, Yorman.

    I deleted the old premium plugin & installed the free version.

    How do I connect that version with my Sucuri subscription?

    Thanks!

    There is no need to connect the new plugin with your Sucuri account, you can simply generate a new API key using the big blue button at the top of the admin dashboard of your website; note that the API key of the old plugin is not compatible with the new code.

    The reason of why the (old) premium plugin was tied to the Sucuri subscription of each client was because it offered a tool named “Active Responses” that used to monitor the activity of the site using an internal service that we were offering, but this service was deprecated when we released the CloudProxy WAF service [1].

    As the “Active Responses” tool was discontinued in order to offer a better firewall through CloudProxy we decided to remove the link between the plugin and the Sucuri dashboard because it was not necessary anymore; you still have to generate a free API key to activate some tools included in the plugin but the key is not connected with the Sucuri subscription, anyone can request a key no matter if they are customers or not.

    Note. If you have a Sucuri subscription there is no need to post your questions in this forum, you can use the internal Sucuri support system, this forum is only for people that use the plugin for free; read this [2].

    [1] https://sucuri.net/website-firewall/
    [2] https://kb.sucuri.net/plugins/WordPress+Plugin/support

    Thread Starter chrislee

    (@ccl1111)

    Understood. Thank you!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Sucuri Security Warnings’ is closed to new replies.