Yes, I’m getting that on several sites also. And this person posted about it under Wordfence support: https://ww.wp.xz.cn/support/topic/false-positive-base-php-on-backwpup
Would appreciate confirmation from BackWPup author that this is a false positive. And maybe they could touch base with the Wordfence people to let them know also.
@lazykins
@syzygist
Don’t worry, Phpseclib is used for encryption backup feature and we can make sure that this is a false result because we use this library directly from http://phpseclib.sourceforge.net/.
Anyway, we are going to inform WordFence and others security plugin about it.
Thank you anyway for reporting it 🙂
Going to close the issue now, if you have any question, please let me know!