falshiw

Thank you for the info.
I’ve checked everything I could find using these resources.
I couldn’t find other threats.
Seems like this modification was before year 2012 and even after several updates of wordpress survived in this file – query.php