Hi,
My security plugin picked up on a change in the file “blog-designer-post-and-widget.php” (version 1.6.2) and I need to ask if these changes are valid or if it’s due to malicious activities. I have not updated the plugin and I don’t use automatic updates.

original string:
‘offers’ => array( ‘trial_premium’ => array( ‘image’ => ‘http://analytics.wponlinesupport.com/?anylc_img=27’, ‘link’ => ‘http://analytics.wponlinesupport.com/?anylc_redirect=27’, ‘desc’ => ‘Or start using the plugin from admin menu’, ) ),

Changed to:
‘offers’ => array( ‘trial_premium’ => array( ‘image’ => ‘http://analytics.wponlinesupport.com/?anylc_img=27’, ‘link’ => ‘https://www.wponlinesupport.com/simplified-checkout3/?edd_action=add_to_cart&download_id=106568&edd_options%5Bprice_id%5D=2&wpos_cart_flush=1&utm_source=optin&utm_medium=WP&utm_campaign=WPOptin’, ‘desc’ => ‘Or start using the plugin from admin menu’, ) ),

I have also downloaded a fresh plugin package from the WP plugin catalog and compared this with the changed file in my installation, and the change is not present in the fresh downloaded version.

Looking forward to your reply.
Thanks,

Regards,
Donald

• This topic was modified 2 years ago by Nighthawk.