Wordfence detected critical issue

Have a look and see how the file has changed. It could just be something benign like a version number.

old version

@wp_mail($email, __(‘New WordPress Site’), $message);

new version

//@wp_mail($email, __(‘New WordPress Site’), $message);

the // is the difference

is that good or bad ?

If that’s the only difference, it is just a comment in the code and not malicious.

I would check who made the change and why, but it is not recommended to modify any WordPress core code.

thanks,

Filename:wp-admin/includes/upgrade.php

my blog is totally new. and even i can’t access this file.

i am new and editing using wordpress editor which doesn’t include upgrade.php
my other files should be at my host who allowed me 1 click install.

is there a way to find what made this change.

Hi abdorefky,
As long as you mentioned this WordPress installation was made by “one click installer”, then your web host could make this change to disable email notification that WordPress sends by default when you first create your website.

This change is safe (however, not recommended), you can choose “Ignoring this file until it changes” from the scan result.

Thanks.

thanks for responding

should i go and revert the change by my self ??

and i did,, will i receive mails from wordpres ?

thanks

As I mentioned:

This change is safe (however, not recommended), you can choose “Ignoring this file until it changes” from the scan result.

This line is related to the notification you get when you create your website for the “first” time only, if you want to revert it back to the default version, then I would recommend contacting your web host asking for that.

Thanks.