• Resolved gnc99

    (@gnc99)


    The Wordfence scan on my site had a new problem message today:
    “WordPress core file modified: wp-includes/load.php”.
    Filename: wp-includes/load.php
    File type: Core
    Issue first detected: 8 hours 1 min ago.
    Severity: Critical
    Status New
    This WordPress core file has been modified and differs from the original file distributed with this version of WordPress.
    —————————
    I’ve made no modifications to that file. One of the options below the message was “Restore the original version of this file”.
    After I selected that option, the message returned was “An error occurred. We could not write to that file. You may not have permission to modify files on your WordPress server.”

    I’m one of two administrators (the only administrator on the site), neither of us has touched that file so seems something else has been changed. Is this a known malware scenario? How do I go about cleaning/fixing? My site is www.

Viewing 6 replies - 16 through 21 (of 21 total)
  • themusicbusinessnetwork

    (@themusicbusinessnetwork)

    I’m having the same issue. Got this message (Notice: Indirect modification of overloaded element of WP_Hook has no effect in /home/content/p3pnexwpnas07_data02/84/2485484/html/wp-content/object-cache.php on line 664) from WordFence this morning (same information 7x repeated in the email).

    I called GoDaddy and according to them line 664 is related to caching. I was told that both my WP plugins & GoDaddy are trying to both flush my cache and that’s most likely the problem and causing a conflict but they don’t know. I sent them the email I got and I sent them this thread to look at. My entire site all day was a mess, all plugins stopped functioning and the entire site went down for no logical reason. After they told me that they didn’t know what was wrong they told me that I must’ve been hacked – this is right before their restore API went down today.

    After having spoken to them pretty much I decided to wait it out then restore my site (as I think the issue is on their end not mine – due to me only having really messed up site issues since their purchase of Managed WP and they’ve had plugin integration issues in particular).

    I just restored my site a little while ago to get it back up and running and in WordFence I have this message showing in detailed activity: Notice: Indirect modification of overloaded element of WP_Hook has no effect in /home/content/p3pnexwpnas07_data02/84/2485484/html/wp-content/object-cache.php on line 664

    In “New Issues” I’ve Got The Following Showing:

    WordPress core file modified: wp-includes/load.php (CRITICAL)
    Unknown file in WordPress core: wp-includes/theme-compat/comments-popup.php (WARNING)
    Unknown file in WordPress core: wp-includes/js/tinymce/wp-mce-help.php (WARNING)
    Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpfullscreen/plugin.min.js (WARNING)
    Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpfullscreen/plugin.js (WARNING)
    Unknown file in WordPress core: wp-admin/js/wp-fullscreen.min.js (WARNING)
    Unknown file in WordPress core: wp-admin/js/wp-fullscreen.js (WARNING)

    At this point I feel like this is all a GoDaddy issue but I don’t know. I just need whatever’s going on to stop and need to know how to fix and prevent it as my entire site got ripped apart and rendered useless today.

    Any help would be greatly appreciated.

    Thank You,

    ~ Kathryn

    I’ve had one attempt at someone trying to login from wp-admin, from India.
    In your Options: enter your own IP address and login name only to be WhiteListed or Allowed.

    Also, I blocked any access to: MYsite.com/wp-includes/load.php
    it seems to be working to deter attempts at trying to login.

    Also: in Settings: put the name: admin down as a banned name,
    While allowing your own name to be used, so you don’t lock yourself out.

    These are all in your settings, and they work fine for me.
    If you have questions, press the little BLUE BUTTON and it will be explained to you.

    Also: I block any URL that is not on my site, since these are links from pornographic sites.

    Yes, its getting worse out there, today I found about 10 from Europe and consistently they are trying to hack into wordpress files.
    I wish WordPress would give us the option to hide those files from any bots or anyone, make them totally inaccessible to even Google’s bots.

    I am just a user on the free version so far its been working well.

    Just to follow. Also having this issue with wp-includes/load.php on GoDaddy.

    Following.
    That’s the most info I’ve found so far. I am ignoring this WF alert for now being as how it is a core file and cannot be edited by me or I assume a hack.

    Thanks all. I’ve been having the same issues (hosting on GoDaddy)

    following this thread, all all plugins w=and wordpress updated

Viewing 6 replies - 16 through 21 (of 21 total)
  • The topic ‘Scan has new problem: WordPress core file modified: wp-includes/load.php’ is closed to new replies.