Exploit discovered by VaultPress security

Hi @spaceball1.

Given the purpose of the code in that file it’s likely that the discovered exploit is false positive. Does VaultPress provide any additional information about what it considered to be an exploit?

I got the same message. VaultPress says, “Our security scanners detected the following possible security issues. We recommend that you review the affected files.

PHP.Generic.BadPattern.5

This code pattern is often used to run a very dangerous shell programs on your server. The code in these files needs to be reviewed, and possibly cleaned.”

@hcarrier Hey, just letting you know that we’ve found what’s causing the security alert. It was indeed a false positive, so we can safely assure you that it’s harmless. We’ll still be working on changing the affected code. The next update of plugin should resolve these security alerts.

Thanks, Miguel. Do you have a sense of when the update will be available?

@mekku Thanks very much. Keep us posted please.

• This reply was modified 5 years, 7 months ago by spaceball1.