File with malicious and unsafe codes?

Did you ever receive a response regarding this question?

The reason I ask is because I discover some malware on my site, but I do NOT know the source of it. I have been using this plugin successfully for a while now, but I am concerned about malicious code injections.

The malware that I discovered would blank out my screen and display a link to a Russian news website when processing an AJAX request in a Gravity Form.

Any feedback would be appreciated.

Hi @bredamcguigan,

The file you mention does not contain malware. It’s simply a minified version of code from https://codemirror.net/. I’m not sure why siteguarding.com is flagging it as malware, but it is most likely a false positive.

Of course, if you already have malware on your server that has been modifying existing files, then it’s always possible that something has been compromised. To be safe, you can always redownload a copy of the plugin and replace the files already on your server.

Reloading the plugin would only replace the plugin files, correct?

Yep, the snippets would remain untouched. The only time they are deleted if you have the ‘Complete Uninstall’ setting activated and delete the plugin through the WordPress Plugins menu.