My security people are seeing it when they are doing their scans – this is the message they are getting in full – so I assume that the .php is where it is.
As far as I am aware I have only one wordpress install – I am very untechnical so don’t know where to look myself at all….
