Wordfence is finding trojan.php in a file in this plugin

  • Hi

    Wordfence is finding this file malicious in its scan. Could this be a false positive or an issue with your plugin maybe ?

    All plugins are up to date.

    Severity: enMaliciousThreatType File: wp-content/plugins/class-sassy-social-share-public.php File signature: 8773c4bafdfcd0b0c245b26b8905ca39

    Threat signature: 0048b334f833b6dd8efc40ca2f349144 Threat name: Trojan.PHP.Popad.gen.d4 Threat: <?php /** * Cont Details: Detected malicious PHP code

    Could you please advise or help please?

    Thanks

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Heateor Support

    (@heateor)

    Hi,

    There is not anything wrong with this original file in the plugin. It might be due to some attack at your website. You would like to scan your website via Wordfence for any possible security threats.
    You can also delete and reinstall the plugin. Before deleting the plugin, make sure to enable the Delete all the options on plugin deletion option in the Miscellaneous section at the plugin configuration page to preserve the plugin configuration for the next installation of the plugin.

    If it happens again, do contact the Wordfence support.

    Plugin Author Heateor Support

    (@heateor)

    FYI, the path of the malicious file you have mentioned here is wp-content/plugins/class-sassy-social-share-public.php which is different from the original file wp-content/plugins/sassy-social-share/public/class-sassy-social-share-public.php

    Thread Starter kristinubute

    (@kristinubute)

    HI

    Thanks for your reply.

    Yes it was wordfence that picked it up. Thank you, I will uninstall the plugin completely.

    And reinstall it freshly,

    It is a great plugin !

    Thanks

    Plugin Author Heateor Support

    (@heateor)

    No problem. Thanks for the appreciation ??

    Let me correct my previous reply – Before deleting the plugin, make sure to disable the Delete all the options on plugin deletion option in the Miscellaneous section at the plugin configuration page to preserve the plugin configuration for the next installation of the plugin.

Viewing 4 replies - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.