wordfence scan is showing vulnerabilities how to fix

Hello @solo77 and thanks for reaching out to us!

If you navigate to the Scan page, you should see 2 buttons:
Delete All Deletable Files and Repair All Repairable Files

https://www.wordfence.com/help/scan/scan-results/#unknown-file-in-wordpress-core can walk you through a resolution for these sorts of issues.

Let me know if this helps!

Thanks!