Wordfence false positives | ww.wp.xz.cn

Resolved David Anderson / Team Updraft
(@davidanderson)

7 years, 3 months ago

Hi,

Wordfence is again flagging false positives when scanning UpdraftPlus (paid versions). It claims that http://login.microsoftonline.de/common/oauth2/v2.0/authorize is a phishing URL, when in fact it’s the official OAuth endpoint of Microsoft Germany, as documented on microsoft.com here: https://docs.microsoft.com/en-us/office/enterprise-includes/o365endpoints/office-365-germany-endpoints

Many thanks,
David

Viewing 5 replies - 1 through 5 (of 5 total)

Stevo
(@sd142ppr)

7 years, 3 months ago

As also discussed in the ww.wp.xz.cn forum here:
https://ww.wp.xz.cn/support/topic/phishing-url-in-updraftplus-file/

Steve

mikemacd
(@mikemacd)

7 years, 3 months ago

The same critical warning message started appearing on my websites today. Each uses Wordfence 7.2.2 and Updraft 2.16.6.

Michael

mitchpowell
(@mitchpowell)

7 years, 3 months ago

Thank you for posting this. I, too, got the alert from WordFence and went over to UpdraftPlus’ support forum to find several “me too” posts, and due to the admin there suggesting we report it to WordFence as a false positive, I came here to add my “Me Too” for what it’s worth.

Glad to know there’s nothing to worry about.

wfdave
(@wfdave)

7 years, 3 months ago

Hi @davidanderson, @sd142pp, @mikemacd, and @mitchpowell,

Thank you for bringing attention to this matter.

Wordfence uses Google Safe Browsing ( https://developers.google.com/safe-browsing/ ) to detect malicious URLs.

That URL was incorrectly added to their list, but now it has been removed. Running a new Wordfence scan should no longer flag that file.

Dave

mikemacd
(@mikemacd)

7 years, 3 months ago

Thanks very much for coming back to us Dave. It’s much appreciated.

Regards
Michael

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Wordfence false positives’ is closed to new replies.

5 replies
5 participants
Last reply from: mikemacd
Last activity: 7 years, 3 months ago
Status: resolved