FYI WordPress 4.9.9 users

  • Hello Wordfence,

    Today I got 5 emails with 5 security alerts about 1 minute after the other in a what i thought was an attack on my website(s). I shutdown my sites and began searching.

    I believe, but not 100% certain that this was caused by the wordpress 5.2 files being downloaded without me manually updating it myself, which when compared to 4.9.9 version of the site would cause an alert of many “UNKNOWN” files from wordfence.

    The question remains: did wordpress 5.2 download without my permission or was it a backdoor that created these files posing as an “update”.

    Either way, I clean installed wordpress, but I thought this may be helpful to others who haven’t updated just yet.

  • The topic ‘FYI WordPress 4.9.9 users’ is closed to new replies.