• Resolved W-P-Zar

    (@carbashop)


    Hello, Wordfence Plugin, detect
    This file may contain malicious executable code.
    Filename:
    wp-content/plugins/duplicator/files/installer.rescue.php
    File type: Not a core, theme or plugin file.
    Issue first detected: 24 mins ago.
    Severity: Critical
    Status New
    This file is a PHP executable file and contains a line 1422 characters long without spaces that may be encoded data along with functions that may be used to execute that code. If you know about this file you can choose to ignore it to exclude it from future scans.

    https://www.ads-software.com/extend/plugins/duplicator/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hi Carbashop,

    I will preference my statement by saying you should always check a file as any file could possibly get exploited on your system if its not properly secured. With that said I would suspect that this is not an issue. I use WordFence myself and have had to exclude several false alarms dealing with this exact message.

    Most likely what it is trying to warn on is a compressed or minified JavaScript code that the WordFence plugin is having issues with. I would consider having the WordFence team re-evaluate their algorithm for that particular detection. Minification in JavaScript files and other web based apps is very common. It is also becoming more common to embed binary images directly into style sheets and this will definitely cause many false alarms…

    If you want to open a help ticket and send me your exact file I can evaluate it for you…

    Hope that helps!

    Thread Starter W-P-Zar

    (@carbashop)

    Thanks for your response.

    No Problem! Happy WordPressing ??

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘This file may contain malicious executable code (Wordfence)’ is closed to new replies.