Support » Plugin: Wordfence Security - Firewall & Malware Scan » Wordfence found unknown files from WP core. Are they WP 5.5 core files or not?

  • Resolved tettt

    (@tettt)


    Hi,

    I have used WP Downgrader to downgrade WP from 5.5 to 5.4.2.

    I have used Wordfence to do a scan and it found about 80 unknown files in WP core folders (wp-admin and wp-includes). The list of the files names is given below.

    Could you please confirm they are WP 5.5 core files? If so, perhaps there should be an update to Wordfence to give more suitable scan results and warnings.

    Many thanks.

    List of file names found in wp-admin and wp-includes and considered unknown by Wordfence:

    Unknown file in WordPress core: wp-includes/sitemaps/class-wp-sitemaps-index.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Need help with a hacked website?

    Our team of security experts will clean the infection and remove malicious content. Once your site is restored we will provide a detailed report of our findings. Includes a 1-year Wordfence Premium license.

    Unknown file in WordPress core: wp-includes/sitemaps/class-wp-sitemaps-provider.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/sitemaps/class-wp-sitemaps-registry.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/sitemaps/class-wp-sitemaps-renderer.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/sitemaps/class-wp-sitemaps-stylesheet.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/sitemaps/class-wp-sitemaps.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/sitemaps/providers/class-wp-sitemaps-posts.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/sitemaps/providers/class-wp-sitemaps-taxonomies.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/sitemaps/providers/class-wp-sitemaps-users.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/sitemaps.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/rest-api/endpoints/class-wp-rest-block-directory-controller.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/rest-api/endpoints/class-wp-rest-block-types-controller.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/rest-api/endpoints/class-wp-rest-plugins-controller.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/separator/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/social-links/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/spacer/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/subhead/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/table/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/tag-cloud/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/text-columns/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/verse/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/video/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/cache-compat.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/class-wp-block-list.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/class-wp-block-pattern-categories-registry.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/class-wp-block-patterns-registry.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/class-wp-block.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/heading-paragraph.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/large-header-button.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/large-header.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/quote.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/text-three-columns-buttons.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Filename: wp-includes/block-patterns/text-three-columns-buttons.php
    File Type: Core
    Details: This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. Learn More
    Unknown file in WordPress core: wp-includes/block-patterns/text-two-columns-with-images.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/text-two-columns.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/three-buttons.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/two-buttons.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns/two-images.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/block-patterns.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/archives/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/audio/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/block/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/button/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/buttons/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/calendar/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/categories/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/classic/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/code/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/column/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/columns/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/file/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/gallery/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/group/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/heading/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/html/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/image/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/index.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/latest-comments/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/latest-posts/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/list/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/media-text/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/missing/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/more/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/nextpage/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/paragraph/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/preformatted/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/pullquote/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/quote/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/rss/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/blocks/search/block.json
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/PHPMailer/Exception.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/PHPMailer/PHPMailer.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/PHPMailer/SMTP.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/SimplePie/Cache/Memcached.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-includes/SimplePie/Cache/Redis.php
    Type: File
    Issue Found August 20, 2020 5:04 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-admin/css/colors/modern/colors-rtl.css
    Type: File
    Issue Found August 20, 2020 4:29 am
    High
    IGNORE
    DETAILS
    Filename: wp-admin/css/colors/modern/colors-rtl.css
    File Type: Core
    Details: This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. Learn More
    Unknown file in WordPress core: wp-admin/css/colors/modern/colors-rtl.min.css
    Type: File
    Issue Found August 20, 2020 4:29 am
    High
    IGNORE
    DETAILS
    Unknown file in WordPress core: wp-admin/css/colors/modern/colors.css
    Type: File
    Issue Found August 20, 2020 4:29 am
    High
    IGNORE
    DETAILS
    Filename: wp-admin/css/colors/modern/colors.css
    File Type: Core
    Details: This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. Learn More
    Unknown file in WordPress core: wp-admin/css/colors/modern/colors.min.css
    Type: File
    Issue Found August 20, 2020 4:29 am
    High
    IGNORE
    DETAILS
    Filename: wp-admin/css/colors/modern/colors.min.css
    File Type: Core
    Details: This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. Learn More
    Unknown file in WordPress core: wp-admin/css/colors/modern/colors.scss
    Type: File
    Issue Found August 20, 2020 4:29 am
    High
    IGNORE
    DETAILS
    Filename: wp-admin/css/colors/modern/colors.scss
    File Type: Core
    Details: This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. Learn More
    Modified plugin file: wp-content/plugins/democracy-poll/js/democracy.js
    Type: File
    Issue Found August 20, 2020 5:04 am
    Medium
    REPAIR
    IGNORE
    DETAILS
    Modified plugin file: wp-content/plugins/democracy-poll/js/democracy.min.js
    Type: File
    Issue Found August 20, 2020 5:04 am
    Medium
    REPAIR
    IGNORE
    DETAILS
    1 path was skipped for the malware scan due to scan settings
    Type: Skipped Paths
    Issue Found August 20, 2020 4:28 am
    Low
    IGNORE

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @tettt

    You can download both versions of WordPress here:

    https://en-gb.wordpress.org/download/releases/

    You can use the VIEW FILE and VIEW CHANGES buttons in each scan result and check the code against the files in the downloads above.

    If you have files for multiple versions of WordPress in your WordPress file system then its likely the WP Downgrader process didn’t work properly.

    Plugin Support wfphil

    (@wfphil)

    Hi @tettt

    If you haven’t asked the WP Downgrader plugin authors for assistance then you can also ask for help here in the Fixing WordPress forum:

    https://wordpress.org/support/forum/how-to-and-troubleshooting/

    Hi

    I’m exactly having the same problem, downgraded from 5.5 to 5.4 and now wordfence is telling me I got 80 suspicious files.

    Downloaded both wordpress versions, didn’t understand properly.

    @wfphil would you please elaborate a little what to look for?

    Thanks in advance.

    Plugin Support wfphil

    (@wfphil)

    Hi @uvhost

    You may not have the exact same problem as I don’t know what you are seeing when you say 80 “suspicious” files.

    You can use the VIEW FILE and VIEW DIFFERENCES button in each scan result and check the file and code against both of your WordPress downloads to determine if you only have multiple files present for two different versions of WordPress.

    If that is the case that you only have scan results for multiple files for two different versions of WordPress in your WordPress file system then you can ask for assistance here:

    https://wordpress.org/support/forum/how-to-and-troubleshooting/

    If you are using the same “WP Downgrader” plugin that the owner of this topic is using then you can ask the “WP Downgrader” plugin authors for assistance if they have broken your WordPress installation.

    Me too. I ve just downgraded from 5.5 to 5.4 and I ve 80 new unknown files in WordPress core 🙁

Viewing 5 replies - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.