Wordfence report says I have hundreds of unknown files in WP core.

  • Wordfence report says I have hundreds of unknown files in WP core, and old WP core files not removed during 6.7 update. In total there are 2313 files and the majority of them listed as “critical issues” by Wordfence. Luckily my site is still working but very slow. I updated to 2025 theme around 8.00am GMT and I had my Wordfence report around 1.15pm GMT. I know you are all very busy but what do you recommend I do to get my site back to the way it was.

    Daniel Steel

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    wait a bit then run the scan again. WF needs to synchronize its list with WP 6.7. My sites scan OK now.

    Yes @sterndata

    Scan again with Wordfence and all should be fine !!

    If not scan a second time – but only if needed

    Wordfence support also suggested scan again.

    It’s concerning to have so many unknown files in your WordPress core and the slow performance of your website. Here are steps you can take to address these issues:

    1. Remove Unknown Files:
    • Go through the list of unknown files identified by Wordfence and remove any suspicious or unnecessary files. Make sure to keep a backup of your site before making any changes.
    1. Update WordPress Core:
    • Although you mentioned updating to the 2025 theme, ensure that your WordPress core is also updated to the latest version. This can help eliminate security vulnerabilities present in older versions.
    1. Scan for Malware:
    • Perform a thorough malware scan using Wordfence or other security plugins to identify and remove any malicious code that may be affecting your site’s performance.
    1. Clean Up Database:
    • Use a plugin like WP-Optimize to clean up your WordPress database, removing any unnecessary data that could be slowing down your site.
    1. Optimize Website Speed:
    • Utilize caching plugins like WP Super Cache or W3 Total Cache to improve the loading speed of your site. Also, optimize images and minimize unnecessary scripts.
    1. Check Theme and Plugins:
    • Ensure that all themes and plugins on your site are up-to-date. Consider deactivating and removing any plugins that are no longer in use or are causing performance issues.
    1. Restore from Backup:
    • If the issues persist and you have a clean backup of your site, consider restoring your site to a previous state before the unknown files were detected.

    Taking these steps should help address the issues with unknown files in your WordPress core and improve the overall performance of your website. Remember to always keep your site updated and regularly monitor for any security threats.

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.