WordFence scan: Unknown File

What is the file name that is listed?

Tim

Filename: wp-admin/css/colors/coffee/php.ini (+104 more)
File Type: Core

Details: This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. 104 more similar files were found.

Thanks for supplying that information. Sometimes the auto update scripts on hosts that update WordPress will write those files into multiple directories to ensure that the update completes. The file, php.ini, is a configuration file and is usually removed after the update but occasionally will stick around. You can remove any of them except the one in the directory WordPress is installed in. So if you wanted to just remove them by clicking the delete file in the scan results you should be good to do that. Or Siteground can remove them for you.

Tim

OK, thank you, that’s great to hear.

But where do I find the whole list of the 104 files??? Wordfence gives only the name of 1 file. I need the whole list to have these deleted in one go. It’d take for ever to do it through WordFence single notifications.

Many thanks,

Muriel

I have the same issue… loads of files (139) but only lists one, and you can only delete one at a time, then you have to run a scan AGAIN… Ridiculous!