Unknown file false positives after upgrade to WP 6.7
-
After upgrading to WordPress 6.7, WordFence (8.0.0) is reporting 2500+ unknown files in WordPress core. This is happening on multiple sites on multiple hosting platforms. I have checked the WordPress github 6.7 repository, and all the files I spot checked are in their proper places. I have compared many of the repository files with files on my servers and they are unchanged. Here are some examples from the list:
wp-includes/sitemaps/class-wp-sitemaps.php
wp-includes/sodium_compat/autoload.php
wp-includes/sodium_compat/* (many files in directory and subdirectories flagged)
wp-includes/style-engine/class-wp-style-engine.php
wp-includes/taxonomy.php
wp-includes/theme-i18n.json
wp-includes/theme.php
wp-includes/update.php
wp-includes/user.phpWhy am I getting all these false positives?
-
Thank you to Jason Ryan (@viablethought) for the correct way to remedy this – which should have not happened in the first place.
Go to Wordfence -> All Options -> Advanced Firewall Options -> Manually Refresh Rules and then run a new Scan
- You must be logged in to reply to this topic.
