False Positive Virus? | ww.wp.xz.cn

Resolved lechon
(@lechon)

7 years, 7 months ago

Hi,
I was just checking to make sure that the plugin is OK and free from viruses.
I ran a scan today using virus total and it shows that might contain one.

Screen shot enclosed here:

View post on imgur.com

Maybe this is just a false positive.

Thanks for developing this great plugin

Viewing 4 replies - 1 through 4 (of 4 total)

Plugin Author Kyle Gilman
(@kylegilman)

7 years, 7 months ago

My assumption is they’re flagging the PHP exec command in the plugin which would allow me to run bad code if I was a malicious source, but is also necessary to run FFMPEG on your server. What tool are you using for that scan?

Thread Starter lechon
(@lechon)

7 years, 7 months ago

@kylegilman

Hi,

here is the scanning tool I was using:

https://www.virustotal.com

Plugin Author Kyle Gilman
(@kylegilman)

7 years, 7 months ago

Yeah, I looked into it a little more and I would call it not exactly a false positive, but more like a warning that if you don’t trust the source (me) then you could potentially be open to running arbitrary code on your server. But that’s true of all WordPress plugins. In fact, Akismet is getting the same warning https://ww.wp.xz.cn/support/topic/akismet-4-0-8-is-vex-webshell/

Thread Starter lechon
(@lechon)

7 years, 7 months ago

Hi @kylegilman

Many thanks for taking the time to explain this.

I know you are a good guy so I have total trust on your work.

Thanks agin for making this awesome plugin.

Cheers!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘False Positive Virus?’ is closed to new replies.

4 replies
2 participants
Last reply from: lechon
Last activity: 7 years, 7 months ago
Status: resolved