Thank you for the advice wfasa! I’m using Wordfence 6.1.7.
Should I delete the whitelistings or just uncheck the enabled box?
What, if anything, should remain whitelisted? I don’t have any downloads on the site.
Hi Brian,
I compared several of the wp-config files with backups and they don’t look like they’ve been changed at all…but I keep getting new messages from wordfence saying that other sites I have also have changed wp-config files. I paid some guy who is a whiz at helping with hacked sites $80 to check my main site and he didn’t find anything wrong. Now I’m also getting notices that error logs have been changed. I’m getting kind of freaked out. Could wordfence be comparing a version number on the wp-config or something like that? Is anyone else reporting that the wp-config has been changed? Over the past month I’ve had about 12 sites report that the wp-config file has been changed.
