Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter gemful

    (@gemful)

    Thank you for all the help, James! I’ve updated WordPress, and WordFence is no longer seeing the file change issues. So relieved the code doesn’t seem malicious!

    Thread Starter gemful

    (@gemful)

    This code is missing from my edit-rtl.css:

    .categorydiv,   1276.customlinkdiv,   1277.posttypediv,   1278.taxonomydiv {   1279   max-height: inherit;   1280   height: 100%;   1281}

    /* Allow space for content after tab panels in nav menu editor. */ 1289   max-height: 200px;1290   max-height: calc( 100% – 75px );   1291   height: 100%;

    This honestly kinda looks like WP rocket having moved/ rearranged/ removed code. All the other CSS files have those same 4 classes (customlinkdiv, posttypediv, taxonomydiv, categorydiv) either added or missing.

    • This reply was modified 1 year, 10 months ago by gemful.
    Thread Starter gemful

    (@gemful)

    So I think this is well above my skill level. Here is the suspect code that is in MY WordPress about.php file but not in the original:

    <div class="about__section changelog has-subtle-background-color">

            <div class="column">

            <h2><?php _e( 'Maintenance and Security Release' ); ?></h2>

         <p>

            <?php

           printf( /* translators: 1: WordPress version number, 2: Plural number of bugs. */

           _n( '<strong>Version %1$s</strong> addressed %2$s bug.',

           '<strong>Version %1$s</strong> addressed %2$s bugs.', 16 ),

           '6.6.1', '16' );?>

            <?php

       printf( /* translators: %s: HelpHub URL. */ __( 'For more information, see <a href="%s">the release notes</a>.' ),

           sprintf( /* translators: %s: WordPress version. */ esc_url( __( 'https://ww.wp.xz.cn/support/wordpress-version/version-%s/' ) ),

           sanitize_title( '6.6.1' )));?>

            </p>

            </div>

            </div>

    I don’t really know what any of it means though…

    Here is the supect code in my update-core.php file:

       // 6.6   769   ‘wp-includes/blocks/block/editor.css’,   770   ‘wp-includes/blocks/block/editor.min.css’,   771   ‘wp-includes/blocks/block/editor-rtl.css’,   772   ‘wp-includes/blocks/block/editor-rtl.min.css’,

    • This reply was modified 1 year, 10 months ago by gemful.
    • This reply was modified 1 year, 10 months ago by gemful.
    • This reply was modified 1 year, 10 months ago by gemful.
    • This reply was modified 1 year, 10 months ago by gemful.
    Thread Starter gemful

    (@gemful)

    Thanks James! I have checked out the first guide.

    • I scanned the site using the two online tools (Sitecheck & VirusTotal) and it’s saying it’s clean.
    • Google Search Console also says it’s clean.
    • I ran a scan using GoDaddys website security check and it also says the site is clean.
    • I’ve also run a full scan of my laptop using McAfee and nothing is being flagged.

    I can’t see evidence of an attack other than what Wordfence is saying. Any other thoughts?

    Thread Starter gemful

    (@gemful)

    Thank you @bcworkz! This is incredibly helpful and has also made me rethink proceeding with multisite. Sounds like there will be a number of aspects of the network that might be outside my current skill set. Yes, only 2 sites so it’s probably not worth the headache. I will still give the option to my client to purchase a third domain and build a network inside that root folder and then domain map their two existing domains to the two subsites- I assume that’s a less complicated option, right?

Viewing 5 replies - 1 through 5 (of 5 total)