Hi Carike,
Thank you for quick reply. I have Akismet, All in One WP Security and Wordfence all installed as security plug-ins.
The files seem empty. I guess that’s…good?
I haven’t seen any other examples of html files as unknown files in the previous forum posts, as you said, similar cases all seem to be php related.
I guess recruiting a more experienced pair of hands than me to take a proper look would be good idea! Thank you.