{"id":6676316,"date":"2015-10-22T23:26:07","date_gmt":"2015-10-22T23:26:07","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/suspicious-file-change\/"},"modified":"2016-08-30T19:25:39","modified_gmt":"2016-08-30T19:25:39","slug":"suspicious-file-change","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/suspicious-file-change\/","title":{"rendered":"suspicious file change"},"content":{"rendered":"<p>Hi&#8230;I have WordFence installed and it gave me the following alert:<br \/>\nWordPress core file modified: wp-includes\/nav-menu.php<\/p>\n<p>Here is the code that has been added (below). Looks very &#8220;hacky&#8221; to me, but I&#8217;m new to this. Am I right? If so, can I choose &#8220;restore the original version of this file&#8221; and will that fix it? How did someone get past WordFence?<\/p>\n<p>[removed]<\/p>\n","protected":false},"template":"","class_list":["post-6676316","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/6676316","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/6676316\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=6676316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}