• Resolved climbingtrees

    (@climbingtrees)


    When I run a scan, it says
    Skipping theme scan Disabled [Visit Options to Enable]
    Skipping plugin scan Disabled [Visit Options to Enable]

    even after I enabled it in the options. I tried enabling Disable config caching as well, but still am seeing the skipping theme and plugin scans in the Scan Summary.

    How do I get theme/plugin scans completed with a free license?

    https://ww.wp.xz.cn/plugins/wordfence/

Viewing 6 replies - 1 through 6 (of 6 total)
  • On the options page, can you enable the javaScript Console? Look for errors in red and let me know what they are (screenshots work best).

    also, do you have any caching plugins other than ours running?

    ti8m

    Thread Starter climbingtrees

    (@climbingtrees)

    Thanks for your help.

    I just ran another scan and received 2 errors – one I restored the original file, and the other is in the screenshot with JavaScript Console here: http://s12.postimg.org/4muokma4t/wordfence_screen.jpg

    I’m also running W3 total cache.

    Can you try disabling google analytics for wordpress and seeing if that allowed you to make the change?

    Also, can you use the javascript console on the options page where you try to save the scan plugins and themes options.

    tim

    Thread Starter climbingtrees

    (@climbingtrees)

    Thanks. Disabling the plugin seemed to help. However, still getting 2 errors from WordFence – what should I do about this?

    [Dec 13 17:34:24]Scanning file contents for infections and vulnerabilities Problems found.
    
    [Dec 13 17:34:24]Scanning file contents for infections and vulnerabilities Problems found.
    This file may contain malicious executable code/home1/*****/public_html/*****/wp-content/plugins/wordfence/lib/wordfenceURLHoover.php
    Filename:	wp-content/plugins/wordfence/lib/wordfenceURLHoover.php
    File type:	Not a core, theme or plugin file.
    Issue first detected:	4 hours 5 mins ago.
    Severity:	Critical
    Status	New
    <code></code>This file is a PHP executable file and contains the word 'eval' (without quotes) and the word 'unpack(' (without quotes). The eval() function along with an encoding function like the one mentioned are commonly used by hackers to hide their code. If you know about this file you can choose to ignore it to exclude it from future scans.

    Can you zip your wordfence folder up and email it to me tim [at] wordfence.com. That file is where it should be but I can’t see how its being flagged so I want to test with it. I just tried a scan wit the latest version of wp and wf and it didn’t flag the file.

    For now, just to be safe, delete the plugin from the server, and completely reinstall it. Run a scan afterwards and let me know how it does.

    tim

    Thread Starter climbingtrees

    (@climbingtrees)

    I had actually deleted the plugin and reinstalled it (through the WP admin panel), as well as manually replaced that file yesterday and the errors were still showing up.

    However, I just logged in and the error is gone – let me know if you’re still interested in seeing the zipped plugin files.

    Thanks for your help; marking topic as resolved.

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Theme/plugin scan skips after being enabled’ is closed to new replies.