• Resolved kernvy

    (@kernvy)


    I installed a theme and child for a new business directory site and see that Wordfence has flagged over 1700 theme files as red alerts. Just how serious is this? The company providing the theme says there are no security issues, but I’ve been a fan of Wordfence too long to believe that. This theme shows my actual user name, not nickname, in the page code of every listing. That alone seems to challenge their security basics from my POV.

    Here are some of the alerts…

    BTW, great job on FastOrSlow.com. Lovin’ it.

    Unknown file in WordPress core: wp-includes/wp-diff.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Need help with a hacked website?

    Our team of security experts will clean the infection and remove malicious content. Once your site is restored we will provide a detailed report of our findings. Includes a 1-year Wordfence Premium license.

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Util.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/X25519.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/XChaCha20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/XSalsa20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Crypto.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Crypto32.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/File.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/PHP52/SplFixedArray.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/SodiumException.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/spl-autoload-compat.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/taxonomy.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/template-loader.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/template.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/comments.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/embed-404.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/embed-content.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/embed.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/footer-embed.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/footer.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/header-embed.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/header.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme-compat/sidebar.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/theme.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/update.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/user.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/vars.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/version.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-nav-menu-widget.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-archives.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-calendar.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-categories.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-custom-html.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-links.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-media-audio.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-media-gallery.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-media-image.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-media-video.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-media.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-meta.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-pages.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-recent-comments.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-recent-posts.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-rss.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-search.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-tag-cloud.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-text.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/widgets.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/wlwmanifest.xml.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/wp-db.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519/Fe.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519/Ge/Cached.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519/Ge/P1p1.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519/Ge/P2.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519/Ge/P3.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519/Ge/Precomp.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519/H.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519/README.md.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Curve25519.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Ed25519.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/HChaCha20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/HSalsa20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Poly1305/State.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Poly1305.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Salsa20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/SecretStream/State.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/SipHash.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/Util.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/X25519.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/XChaCha20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core/XSalsa20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/BLAKE2b.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/ChaCha20/Ctx.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/ChaCha20/IetfCtx.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/ChaCha20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519/Fe.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Cached.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519/Ge/P1p1.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519/Ge/P2.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519/Ge/P3.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Precomp.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519/H.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519/README.md.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Curve25519.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Ed25519.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/HChaCha20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/HSalsa20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Int32.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Int64.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Poly1305/State.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Poly1305.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/Salsa20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/SecretStream/State.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/src/Core32/SipHash.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/namespaced/Core/Poly1305.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/namespaced/Core/Salsa20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/namespaced/Core/SipHash.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/namespaced/Core/Util.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/namespaced/Core/X25519.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High
    Ignore

    Details

    Unknown file in WordPress core: wp-includes/sodium_compat/namespaced/Core/XChaCha20.php.1471916354
    Type: File
    Issue Found September 29, 2020 9:21 pm
    High

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @kernvy, thanks for your kind words about FastOrSlow and reaching out to us about this issue.

    We feel that if it were malware due to the theme, there would be more files being marked as malicious, rather than unknown.

    After a search, we have seen a few of those unusually named files as part of core development files on GitHub, so it’s likely they are part of a partial/failed update.

    I would suggest at this point to check with your host whether they can see any logs or record of failed updates. This may result in being able to clear them from your webspace so they don’t show up in future scans.

    Let me know how you get on!

    Thanks,

    Peter.

Viewing 1 replies (of 1 total)
  • The topic ‘Additional Core Files’ is closed to new replies.