._ Unknown files in WordPress core (Version 6.1.11)

Hi, I encountered this issue today when I got this email from Wordfence outlining these “new issues” on my website. The website for all intents and purposes has been dormant for a couple of years as I have never found time to complete it:

Warnings:

* Unknown file in WordPress core: wp-admin/admin.php.bak

* Unknown file in WordPress core: wp-admin/includes/class-plumb-prowess.php

* Unknown file in WordPress core: wp-admin/link-arrogate-besiege.php

* Unknown file in WordPress core: wp-admin/media-upload.php.bak

* Unknown file in WordPress core: wp-includes/SimplePie/Content/9a25a274_noversion.php

* Unknown file in WordPress core: wp-includes/SimplePie/XML/f0084421_noversion.php

* Unknown file in WordPress core: wp-includes/date_ver1.php

* Unknown file in WordPress core: wp-includes/js/imgareaselect/border-anim-v_indesit.php

Should I be concerned? Any help that can be provided is much appreciated! Thanks.

Hi there, I’m having the same issue – affected files vary from site to site but here is one example set.

Alert generated at Friday 29th of July 2016 at 02:37:03 AM

Warnings:
* Unknown file in WordPress core: wp-admin/includes/upgrade.php.orig
* Unknown file in WordPress core: wp-admin/plugin-uploader.php
* Unknown file in WordPress core: wp-admin/theme-uploader.php
* Unknown file in WordPress core: wp-admin/uploader/pclzip.lib.php
* Unknown file in WordPress core: wp-admin/uploader/upload.php
* Unknown file in WordPress core: wp-includes/functions.php.orig

Thanks in advance.

Same report for me.

Undefined index: coreUnknown in /home/xxx/public_html/wp-content/plugins/wordfence/lib/wordfenceHash.php on line 141

I too am getting a similar warning on my Synology server. Here’s the Wordfence warning in its entirety. https://pastebin.com/4TggaCti

@idealynx I checked this list and it seems to has all files in (wp-admin, wp-includes), you can add "*@SynoEAStream" (without quotes) in “Exclude files from scan that match these wildcard patterns.” under (Wordfence > Options => Scans to include).

@all
Regarding “Unknown file in WordPress core” warnings, please check this reply here, I hope you find it helpful.

Thanks.

Well, I did an upgrade to Wordfence recently and started getting the following errors is some of my wp installed on my server…

Unknown file in WordPress core: wp-includes/ID3/usr/index.php
Unknown file in WordPress core: wp-includes/Text/Diff/usr/index.php

just to be safe i deleted the files that Wordfence was flagging, I runned another scan and they seem to be working ok with no errors or marked as suspicious by Wordfence/
Anyone had the same errors?

It seems that in my case various plugins and my own past mods have added files to core that are caught by this “Scanning for unknown files in wp-admin and wp-includes”

This scan is useful, but also could be classified as “too much information.”

I deleted (after backup) all the files the file scan found, and WordPress didn’t break. Interestingly, it scanned 53,517 files containing 4.6 GB of data, wow, is calling WordPress “bloated” an exaggeration? Spaghetti for dinner anyone? That’s _without_ plugins!

Doing only this scan did not appear particularly memory intensive so I’m leaving it checked, along with just a few other scan options. I’ve found that the Wordfence scans go much better with most of the scan options OFF, unchecked. I schedule my scans to run once a week, at night on weekends, when memory demands are low.

Feature request, why not move the Scan options to the “Scan” page? Seems a little ridiculous to have them cluttering up the general options page, which is already incredibly long and difficult to navigate.

MTN

Oh, BTW, I also got the “Undefined Index” message. Please fix that, annoying, as I have no idea in creation as to what it means. MTN

I recently installed wordfence after my site got hacked.
I backed up the site, updated everything, installed Wordfence and ran a scan and recieved approx 20.000 core file errors. (Couldn’t find the option to repair them?)

Should I be worried, or is this the explanation?

Hello developers, how does it look with the following message?

Unknown file in WordPress core: wp-admin/domain_check.php

Do I have to worry about something?

Thank you for an answer

@stylegrafiker this file isn’t included in the default WordPress installation, I think it could be related to your hosting provider, I suggest contacting them before deleting this file.

P.S. you can refer to this reply for further information about how to deal with non-core WordPress files.

Thanks.