Wordfence Alert Problems found

Hi @jadportado,

We use site_url() to retrieve the site url for the current site.

Maybe you have that tag set incorrectly, or one of your plugins has changed its value.

It is also possible that this modification is the result an infection on your site. In such case, please check this article in order to find out how to clean your site.

Hi @wfyann,

Thanks for your tips. I have scanned the site with Wordfence, GOTMLS, cpanel virus scanner and Sucuri, site seems clean.

I have manually checked the folders, no suspicious files as well.

I have uninstalled Wordfence with option to drop the tables and reinstalled the plugin.

Also I have defined the home and site URL in wp-config.php

Hope this will fix the issue. I’ll let you know if I get that weird URL again in the email notification.

Thanks.

Side note: @jadportad Do not post your site as a tag here, that’s a good way to get flagged as a spammer. I’ve deleted your tag.

Hi @jadportado,

Thanks for the feedback.

One of my colleagues also mentioned that some hosts’ one-click WP installers also will set the site_url and home_url dynamically using constants in wp-config.php like this:

define('WP_SITEURL', 'https://' . $_SERVER['HTTP_HOST']);
define('WP_HOME', 'https://' . $_SERVER['HTTP_HOST']);

When they do that, WP will treat a request for any hostname as its own hostname. (This assumes the request can get routed to the site in Apache — it sometimes can’t happen in shared hosting, if the server config depends on the hostname to match to the right user’s site.)