• Resolved stuartcusack

    (@stuartcusack83)


    Hi, I just want to say that although WordFence is a great plugin, it has failed to recognise lots of backdoor threats that the ‘Anti-Malware’ plugin found. So now I use both WordFence and Anti-Malware on all my websites.

    I was solely using WordFence on my client’s websites and they have been repeatedly spamming and eventually taken down by my hosting provider. So although WordFence is good, it is not a total solution for my websites.

    https://www.ads-software.com/plugins/wordfence/

Viewing 4 replies - 1 through 4 (of 4 total)
  • ottomek

    (@ottomek)

    Which anti-malware plugin do you like?

    Thread Starter stuartcusack

    (@stuartcusack83)

    I am using a combination of WordFence and the Anti-Malware plugin by GOTMLS.

    They both provide different functionality and they both detect security vulnerabilities that the other one does not.

    I am not yet in a position to confirm whether running these two will entirely solve my malware problem, but if my websites continue to run smoothly then I will update this post in future.

    jroberts.gd

    (@jrobertsgd)

    I’ve experienced a similar issue in which Wordfence, while it did catch a number of malware, failed to detect over 800 backdoor threats. I only became aware of them when using Sucuri’s server-side scanner which found multiple threats like this:

    Warning: File possibly compromised: ./wp-content/uploads/sites/_input_1_OXK.php5. (php.backdoor.eval_REQUEST.008). Manual review recommended.

    This was on an aged multisite using Headway and Gravityforms.

    Plugin Author WFMattR

    (@wfmattr)

    Thanks for the reports — if you still have copies of any of the malicious files that were not caught by scans, we accept submissions at: samples (at) wordfence.com

    Our researchers evaluate the submitted files for inclusion in future scans.

    -Matt R

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Backdoor threats not detected’ is closed to new replies.