WordPress core files modified (398)

  • Resolved headstwogether

    (@headstwogether)


    2 years, 5 months ago

    Good evening,

    I have recently started admin help on a head and neck cancer charity WordPress site. I am a cancer survivor and helping the organisation.

    We have had an issue with cross site SQL injection on all the album links for about 4 months, I think I found the issue today and this no longer seems to be a problem.
    However I have just run a WordFence scan and have 398 WordPress core file modified.

    What could be causing this?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support wfmark

    (@wfmark)

    2 years, 5 months ago

    Hello @headstwogether, and thanks for reaching out to us!

    If you could navigate over to Wordfence > Scan page, find these results, click on them to expand the details, then screenshot them for me to review. You can post them here if you remove the sensitive data or send them to wftest@wordfence.com.

    Also, can you send a diagnostic report to wftest @ wordfence.com? You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    Thanks!

    Mark

    Thread Starter headstwogether

    (@headstwogether)

    2 years, 5 months ago

    Hi Mark,

    I sent the diagnostic report and a couple of screen shots, every one i’ve checked (there are 389 so only a couple) shows no differences when I click that button.

    Could these be false positives? If so how do I rectify?

    Thanks

    Thread Starter headstwogether

    (@headstwogether)

    2 years, 5 months ago

    hi Mark,

    Did you receive the diagnostic report and email? Are these false positives?

    Plugin Support wfmark

    (@wfmark)

    2 years, 5 months ago

    @headstwogether,

    Apologies for the late response. We did receive your report, however, we couldn’t find anything that could explain these scan results. Everything looks good.

    Have you tried running the scan again? I have seen cases where running the scan again clears them. I’ve seen updates or backup restores come up with this sort of result that’ll clear once all the files and current versions all match up.

    Let me know if this is the case.

    Thanks,

    Mark

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘WordPress core files modified (398)’ is closed to new replies.