Unknown file in WordPress core

Hi @yas-se, thanks for reaching out to us.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

I’m requesting this as it’ll show the scan results above, as well as highlight the plugins/environment you’re running on so I can check your setup for myself. There’s a chance these are false-positive results but I want to be 100% sure of your installed plugins and any changelogs that may surround the files highlighted here.

Thanks,

Peter.

Hi @yas-se,

I am concerned by the presence of PHPMyAdmin in this location and the “critical” issue found also. They aren’t necessarily signs of deliberate malicious actions, but they are less than ideal to have in those locations where they can be accessed. I recommend removing all of the files highlighted as part of this scan and making sure all of your plugins are up-to-date.

Let me know if anything crops up after doing that.

Thanks,

Peter.

No worries @yas-se, I will leave this ticket open for around 7 days but hope that no further issues around the presence of these paths/files come up in subsequent scans.

If you have Wordfence questions related to other subjects/features at any point, please start a new topic in the forum and we’ll always be glad to help you out.

Peter.