Chris M.

I would like a clarification from the plugin author on this as well. I – and many of my clients – use Cloudflare as well.

Thanks in advance!

Hello WordFence Support!

Even after the update I am getting these things flagged (OptinMonster, a premium plugin).. These are only snippets, just to show where the so-called “eval” occurs:

foreach ($val as $key2 => $val2) {
                    $rs .= '<member><name>' . xmlrpc_encode_entitites($key2, $GLOBALS['xmlrpc_internalencoding'], $charset_encoding) . "</name>\n";
                    //$rs.=$this->serializeval($val2);
                    $rs .= $val2->serialize($charset_encoding);
                    $rs .= "</member>\n";
                }

// array
                $rs .= "<array>\n<data>\n";
                for ($i = 0; $i < count($val); $i++) {
                    //$rs.=$this->serializeval($val[$i]);
                    $rs .= $val[$i]->serialize($charset_encoding);
                }

// DEPRECATED
    function serializeval($o)
    {

For anyone following this thread, I want to clarify what I reported earlier about the XML sitemap failing after updating to 3.7. I have no idea what is specific on my server/site that would cause this to only happen to me, but so be it! Nevertheless, here’s how I fixed it:

I turned off the XML sitemap feature, and Saved. Then turned it back on, and Saved, and voila, no more 404 error and the sitemap works again.

I get the same error (noticed it when updating an unrelated plugin, as others have mentioned here).