l10n.php file changes continuously

  • Resolved Nazgool

    (@nazgool)


    3 years, 10 months ago

    Hi everyone (WF Team/Community)

    After I installed WF and it cleaned my site, almost everyday WF reports in its scan that

    “WordPress core file modified: wp-includes/l10n.php” as critical issue

    So as always I do a “Repair” then the issue appears again and the file changes.

    Any idea or help with this!!
    Is there a hack stuck in my site??

    Thanks and I appreciate your help!!!

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    3 years, 10 months ago

    Hi @nazgool, thanks for reaching out to us.

    One option would be copying the contents of the file, or at least the reported changes by Wordfence here, however there is a chance that there’s obfuscated code elsewhere caused by malware – although I can’t 100% confirm that without seeing more details.

    Sending a copy of that l10n.php to our team at samples @ wordfence . com might be a good idea. They should let you know whether a site cleaning should be performed or manually removing the code you’re seeing is appropriate.

    Please note that when attaching files, ensure that you remove any database access credentials or keys/salts contained inside before sending.

    Thanks,

    Peter.

Viewing 1 replies (of 1 total)

The topic ‘l10n.php file changes continuously’ is closed to new replies.