po and mo files flagges

Hello @flexer and thanks for reaching out to us!

If you could do me a favor to test for us, navigate to Wordfence > All Options > Advanced Firewall Options > Manually Refresh Rules. Once you refresh them, do another scan to see if these results show again.

Let me know what you find!

Thanks!

Thanks @wfadam
Did and unfortunately teh results were the same
Daveed

I checked with our QA team on this just to be sure.

It is safe to just “Ignore” these files from your scan.

You might have an earlier installation that stayed that way through the years or may even be running an old version of WPML in which your files are still stored in the wp-includes. In the later versions, this is stored in the wp-content. That is why the scan is alerting you.

Let me know if you have any questions!

Thanks!

Thank you @wfadam

There are hundreds of files, do I need to ignore each one individually, or is there a way to do this to all of them?

I have quite a few other sites with WMPL and WF. I only updated this one to 4.6. The other ones are not showing this issue.
Daveed

You could also disable the Scan wp-admin and wp-includes for files not bundled with WordPress in the Scan Options.

I would recommend checking with WPML to see if there’s a way to switch to using wp-content/languages/ for these files.

Thanks!

Thanks @wfadam
I ended up chatting to WPML.org support and it was most likely an old install that did not update properly. We fixed it by moving the languages folder to the correct spot.

So ultimately WF helped me find an issue on the site I was otherwise not aware of. Unintended consequences ??

Thanks again,
Daveed

Thanks for the update!

Glad you got it resolved!