Malware in Yoast?

I got a similar notice on one of my sites. Using free Yoast Seo

I use the Professional version.

Yes I know. I was pointing out that this occurred in the other version. I thought that might be relevant to the overall cause.

File contains suspected malware URL: /home3/warfordo/public_html/wp-content/plugins/wordpress-seo-premium/changelog.txt
Filename: wp-content/plugins/wordpress-seo-premium/changelog.txt
Bad URL: https://wordpresssupplies.com/wordpress-plugins/no-category-base/)
File type: Not a core, theme or plugin file.
Issue first detected: 5 hours 54 mins ago.
Severity: Critical
Status New
This file contains a suspected malware URL listed on Google’s list of malware sites. Wordfence decodes base64 when scanning files so the URL may not be visible if you view this file. The URL is: https://wordpresssupplies.com/wordpress-plugins/no-category-base/) – More info available at Google Safe Browsing diagnostic page.

So I looked through the text file in question and saw a reference to the site url listed above. Does anyone know if that is sufficient for WordFence to flag it? I checked the changelog.txt ( for the free version of Yoast seo) file in virustotal and it came back fine. I don’t know enough about base64 encoding to know if it could still be malicious.Hopefully a more experienced user can clarify this.

I just got this same notice for three sites. The problem appears to me to be the fact that the url https://wordpresssupplies.com/wordpress-plugins/no-category-base/) is listed in the file that is on my site which, in this case, is the Yoast SEO changelog.txt file. It is just a reference to something that has been fixed in the past, etc.

However, it looks like wordpresssupplies.com has been flagged by Google for hosting malware. My guess is that WordFence is marking it as a problem because of that link being listed in the blacklist that Google has.

It should not be a problem for your site as it is not a “live” file. It would only be harmful to someone if they visited that wordpresssupplies.com site.

I’m not 100% sure this is the issue, but it looks most likely to me.

@fstopusa is completley right. WordFence is throwing a far too big warning for an issue so small. Feel free to delete the file, the link will be gone in the next release.

Thankfully it turned out to be much ado about nothing. Thanx everyone for your help.