Wordfence Warning: Modified Plugin files

  • Resolved mutual50

    (@taastrategies)


    8 years, 12 months ago

    WordFence is warning of two plugin files which have been modified without going through the standard plugin update process. A comparison of the two files shows major changes throughout:

    Modified plugin file: wp-content/plugins/sg-cachepress/languages/sg-cachepress-bg_BG.mo

    Modified plugin file: wp-content/plugins/sg-cachepress/languages/sg-cachepress-bg_BG.po

    This indicates that either SG has rolled out plugin changes w/o going through the standard process or the files have been corrupted by outsiders. Neither is palatable to this user.

Viewing 6 replies - 1 through 6 (of 6 total)
  • stijndw

    (@stijndw)

    8 years, 12 months ago

    We have the same problem on quite a lot of websites. Could you please give an update on this?

    wherring

    (@wherring)

    8 years, 12 months ago

    I have an open ticket with Siteground on this. The initial response is the file hasn’t been recently modified and they couldn’t see any security issues with it. I have a suspicion a different version has been uploaded to the WordPress repository and is causing the warning but I’m waiting for a response on that.

    wherring

    (@wherring)

    8 years, 12 months ago

    Didn’t get an explanation as to why but they suggested just reinstalling it from the repository version.

    claikind

    (@claikind)

    8 years, 12 months ago

    I got the same thing – wherring – are they saying to reinstall it (the plugin) from WordPress. org? Or from siteground?

    Thread Starter mutual50

    (@taastrategies)

    8 years, 12 months ago

    Very surprised and unhappy regarding the lack of response from SiteGround on this. I have come to expect excellent support from SG and this failure to address what represents a potential security risk for customers is unacceptable. I have rolled back the changes and I will be opening a ticket on SG.

    Plugin Author Hristo Pandjarov

    (@hristo-sg)

    SiteGround Representative

    8 years, 11 months ago

    I have pushed an update of the translation files in Bulgarian because of a simple typo. Didn’t “up” the version because that was too minor change. WordPress detects the change in the language files and ups the translation.

    It’s a false-positive warning from WordFence and you can ignore it completely. There’s notnhing to worry about. Sorry for the late reply, I had issues with my notification emails for new threads not being delivered 🙁

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Wordfence Warning: Modified Plugin files’ is closed to new replies.