unknown files in wordpress core

  • Resolved adambs

    (@adambs)


    1 year, 6 months ago

    My Wordfence scan has notified me that there are over 2500 files with issues. Lots of these are listed as unknown files in WordPress core, and there also many old WordPress files note removed during update. The unknown files are listed as high severity problem. When I click on details against each of these unknown files in the list in the Wordfence dashboard, it says “This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker.”

    The files listed as old WordPress files are listed as low severity problem.

    How can i resolve these issues?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support wfpeter

    (@wfpeter)

    1 year, 6 months ago

    Thanks @adambs for reaching out and thank-you for your patience.

    This issue was ultimately unrelated to the firewall rules being updated and it was remediated as we made changes on our side. The issue was due to one of our integrations that was incorrectly reporting the files as unknown. This was fixed earlier today and subsequent automatic or manual scans should no longer show the files as unknown. We have some documentation on these scan results here in general for reference, and restoring deleted or repaired files from a backup if the site has issues is the best option: https://www.wordfence.com/help/scan/scan-results/#unknown-file-in-wordpress-core

    Peter.

    Plugin Author Mark Maunder

    (@mmaunder)

    1 year, 6 months ago

    An additional follow-up with detail on the underlying issue and additional clarification that this has nothing to do with firewall rules and that we have never changed the frequency on those. The issue is now fully resolved, we have additional alerting in place in case it occurs again and we’re refactoring the code that runs this process to make it far more robust.

    https://ww.wp.xz.cn/support/topic/ouch-unknown-file-in-wordpress-core-wp-v6-7/#post-18133181

    Mark Maunder – CTO @ Wordfence

    • This reply was modified 1 year, 6 months ago by Mark Maunder.
Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘unknown files in wordpress core’ is closed to new replies.