WordFence showing additional files in WordPress core

  • wwwolf

    (@wwwolf)


    7 years, 8 months ago

    Since recent WordFence Security update scanning for additional files in the core, I’m getting a whole slew of warnings – are these files all added by Customizr? They shouldn’t really be in the core but, at least if I know that’s why they are there, I can tell WordFence to ignore them:

    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.accordion.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.autocomplete.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.button.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.core.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.datepicker.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.dialog.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.draggable.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.droppable.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-blind.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-bounce.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-clip.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-drop.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-explode.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-fade.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-fold.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-highlight.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-pulsate.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-scale.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-shake.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-slide.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect-transfer.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.effect.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.menu.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.mouse.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.position.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.progressbar.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.resizable.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.selectable.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.slider.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.sortable.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.spinner.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.tabs.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.tooltip.min.js
    * Unknown file in WordPress core: wp-includes/js/jquery/ui/jquery.ui.widget.min.js
    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpfullscreen/plugin.js
    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpfullscreen/plugin.min.js
    * Unknown file in WordPress core: wp-includes/js/tinymce/skins/wordpress/images/dashicon-no-alt.png
    * Unknown file in WordPress core: wp-includes/js/tinymce/wp-mce-help.php
    * Unknown file in WordPress core: wp-includes/theme-compat/comments-popup.php

    Thanks.

Viewing 3 replies - 1 through 3 (of 3 total)
  • toniharvey

    (@toniharvey)

    7 years, 8 months ago

    ….Unknown file in WordPress core: wp-….

    I upgraded to WF 6.1.12 yesterday 8/2 a 1:30 pm and the email sent to me at 2:34 am today showed 1,040 files. I’m happy to send the list to someone from Word Press so you can tell me if I can ignore the warnings, or if I should delete the files.

    Menaka S.

    (@menakas)

    7 years, 8 months ago

    Hi,
    These files are not introduced by Customizr theme.

    Thread Starter wwwolf

    (@wwwolf)

    7 years, 8 months ago

    This seems to be happening all over the place – the new version of WordFence is effectively highlighting bad practice by developers, by throwing warnings when files have been put in places they don’t belong – i.e. in the core instead of inside plugins/themes. As someone posted elsewhere (WordFence support?), I’m not sure whether to laugh or cry. Such bad practice needs to be called out… but where does that leave the rest of us, who have to find a way of distinguishing between ‘sloppy-but-safe’ and unwanted-possibly-malicious’?!

    I have my suspicions which plugin did this, but I didn’t build the site (am NEVER taking on another developer’s site again without a rebuild!) – doesn’t help that the only help for the plugin concerned is bloody videos… whatever happened to d-o-c-u-m-e-n-t-a-t-i-o-n ?!?
    [/rant] (sorry)

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘WordFence showing additional files in WordPress core’ is closed to new replies.