• Resolved Zepfanman

    (@zepfanman)


    This seems odd. I just changed my database password, so I uploaded my wp-config.php file via ftp with the new password. Now, a Wordfence scan “Unknown file in WordPress core: wp-admin/wp-config.php” This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker.

    Did I do that incorrectly? Why does Wordfence think wp-config.php is an issue?

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support WFAdam

    (@wfadam)

    Hello @zepfanman and thanks for reaching out to us!

    Usually, you will see this result if your WordPress core files do not match the current version of WordPress that you have installed.

    If you already know about the listed file, you can click the link to ignore the file until it changes. If you don’t know what the file is, it may require some investigation to find out if your host has placed it there, or if it may have been created by your FTP application or OS, or if it is malicious. In your case though, this is just a false positive.

    You did the process correctly, Wordfence is just letting you know something changed. You can just ignore it and this result won’t be produced anymore.

    If you have any other issues or questions, please feel free to post another topic and we would be happy to assist!

    Thanks again for your support!

    Thread Starter Zepfanman

    (@zepfanman)

    @wfadam Thank you. And thanks for such an essential plugin!

    Plugin Support WFAdam

    (@wfadam)

    Thanks again for your support @zepfanman

    If you have any other issues or questions, please feel free to post another topic and we would be happy to assist!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Unknown file in WordPress core: wp-admin/wp-config.php’ is closed to new replies.