Wordfence warning flag

  • Resolved sofiac1

    (@sofiac1)


    6 years, 9 months ago

    Please advise regarding the following:

    Filename: wp-content/plugins/so-css/readme.txt
    File Type: Plugin
    Details: This file belongs to plugin “SiteOrigin CSS” version “1.1.5” and has been modified from the file that is distributed by www.remarpro.com for this version. Please use the link to see how the file has changed. If you have modified this file yourself, you can safely ignore this warning. If you see a lot of changed files in a plugin that have been made by the author, then try uninstalling and reinstalling the plugin to force an upgrade. Doing this is a workaround for plugin authors who don’t manage their code correctly. [See our FAQ on https://www.wordfence.com for more info]

    Thanks for your help!

Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Support Andrew Misplon

    (@misplon)

    Hi @sofiac1

    When you use the link to see how the file has changed, what do you see?

    Thread Starter sofiac1

    (@sofiac1)

    Old file says: Tested up to: 4.9
    Modified file says: Tested up to: 4.7.2

    Thread Starter sofiac1

    (@sofiac1)

    Filename: wp-content/plugins/so-css/readme.txt
    File type: Plugin File
    Plugin Name: SiteOrigin CSS
    Plugin Version: 1.1.5
    The Original Version of the file The Modified Version on your WordPress system
    1 === SiteOrigin CSS === 1 === SiteOrigin CSS ===
    2 Tags: css, design, edit, customize 2 Tags: css, design, edit, customize
    3 Requires at least: 3.9 3 Requires at least: 3.9
    4 Tested up to: 4.9 4 Tested up to: 4.7.2
    5 Stable tag: 1.1.5 5 Stable tag: 1.1.5
    6 Build time: 2017-09-19T17:05:02+02:00 6 Build time: 2017-09-19T17:05:02+02:00
    7 License: GPLv2 or later 7 License: GPLv2 or later

    Plugin Support Andrew Misplon

    (@misplon)

    Thanks. There isn’t anything in that change that could pose a security issue as far as I’m aware.

    Plugin Support Andrew Misplon

    (@misplon)

    The current version has the following:

    === SiteOrigin CSS ===
Tags: css, design, edit, customize
Requires at least: 3.9
Tested up to: 4.9

    So you’re welcome to delete SiteOrigin CSS, go to Plugins > Add New and reinstall it.

    The core of your question though, pertains to a possible security issue from a changed file. To my knowledge a change in the tested version wouldn’t have any security implications.

    Here is when the change was made: https://github.com/siteorigin/so-css/commit/8b35ee87c0460d264d0eaa439a6326e8c8843688.

    Thanks.

    Thread Starter sofiac1

    (@sofiac1)

    If I delete your plugin and reinstall it, I imagine that any changes that I made with it would be lost. Is that correct? Or am I worrying about nothing?

    Thanks for all your help!
    Sofia

    Plugin Support Andrew Misplon

    (@misplon)

    Your Custom CSS will be safe during an update process like that. You can delete the plugin and reinstall it ??

    Thread Starter sofiac1

    (@sofiac1)

    Thanks!

    Plugin Support Andrew Misplon

    (@misplon)

    For sure ?? All the best.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Wordfence warning flag’ is closed to new replies.