Support » Plugin: Wordfence Security - Firewall & Malware Scan » Unknown file in WordPress core

  • Resolved gkartikey

    (@gkartikey)


    Hi,

    I have a few unknown files after upgrading to WordPress 5.4, and it says the following message:
    This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files leftover from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker

    Files as:
    wp-includes/class-wp-object-cache.php
    wp-includes/css/dist/block-directory/style-rtl.css
    wp-includes/css/dist/block-directory/style.css
    and 9 more like this.

    So, any way to know what to do, like delete file or mark as fixed?

Viewing 15 replies - 1 through 15 (of 20 total)
  • Hi,

    Any response to my query?

    Plugin Support wfphil

    (@wfphil)

    Hi @gkartikey

    Some hosting providers that provide managed WordPress hosting do this where they leave behind old core WordPress files that are no longer needed and would normally be removed during a WordPress upgrade. Your hosting provider can confirm if this is the case here.

    Hi,

    I’m using Digital Ocean(host) with Litespeed on Cyberpanel, so I think I should contact Cyberpanel as they installed the files on my server?

    Plugin Support wfphil

    (@wfphil)

    Hi @gkartikey

    If Cyberpanel manages the updates of WordPress for you then that is a possibility that the update process didn’t complete correctly.

    Hi @wfphil

    I installed WordPress on Cyberpanel, after deploying a Droplet of Cyberpanel on Digital Ocean. And I updated WordPress myself to 5.4. So, now can you clarify what the issue could be?

    Plugin Support wfphil

    (@wfphil)

    Hi @gkartikey

    I had time to check.

    wp-includes/class-wp-object-cache.php exists in WordPress 5.4 but does not exist in WordPress 5.3.2 so this might indicate that your site is not able to connect to the wordpress.org API and thus a proper WordPress version check can’t be carried out.

    Look in the WordPress Tools >> Site Health page. Check if there is a fault for Can communicate with WordPress.org

    Hi @wfphil

    I checked the same, it says “WordPress.org is reachable” under the Info Tab in Site Health.

    • This reply was modified 2 months, 2 weeks ago by gkartikey.
    Plugin Support wfphil

    (@wfphil)

    Hi @gkartikey

    Thank you for the update.

    You will need to ask your hosting provider to see if there are any outbound connections being blocked on the server.

    You can also ask for help here:

    https://wordpress.org/support/forum/how-to-and-troubleshooting/

    Hi @wfphil

    I checked and there are no outbound connections blocked on the server. Anyway, I can confirm this?

    Moreover, I just made a ticket as per your suggestion.

    https://wordpress.org/support/topic/unknown-file-in-wordpress-corescan/

    Hi @wfphil

    Do read this thread: https://wordpress.org/support/topic/unknown-file-in-wordpress-corescan/.

    And now what to do for the solution as Wordfence is not recognizing the files?

    Plugin Support wfphil

    (@wfphil)

    Hi @gkartikey

    Look in ~/wp-includes/version.php around line 16.

    What version number do you see for $wp_version =

    gkartikey

    (@gkartikey)

    Hi @wfphil

    It says ‘5.4.1’.

    Plugin Support wfphil

    (@wfphil)

    Hi @gkartikey

    Thank you for the update.

    Please run a new scan until it completes.

    Then send me your Wordfence diagnostics report. Please go to the top of the “Diagnostics” tab on the Wordfence “Tools” page. There will be a “SEND REPORT BY EMAIL” button to send the diagnostics report. Enter wftest [at] wordfence [dot] com as the email and @gkartikey as the forum username please.

    Once you have emailed me the diagnostics report can you reply here to let me know that it has been sent. This is important in the unlikely event that your installation of WordPress is having an issue with sending mail.

    Thank you.

    Hi @wfphil

    I’ve sent you the email using the process you specified.

    Hope you find a solution to this. 🙂

    • This reply was modified 1 month, 3 weeks ago by gkartikey.
    Plugin Support wfphil

    (@wfphil)

    Hi @gkartikey

    Thank you for sending the report.

    Your scan results only show two issues:

    The Plugin “Variation Swatches for WooCommerce – Pro” needs an upgrade (1.0.50 -> 1.0.51)

    The Plugin “WooCommerce Photo Reviews Premium” needs an upgrade (1.1.3.4 -> 1.1.4.2)

    There are no scan result for files that are in a WordPress core location that is not distributed with this version of WordPress.

Viewing 15 replies - 1 through 15 (of 20 total)
  • You must be logged in to reply to this topic.