• J

    (@jleeacculynx)


    Hello,

    When I run the scan, it will consistently track 2 HubSpot plugin files as having changes: wp-content/plugins/leadin/js/src/entries/elementor.js and wp-content/plugins/leadin/js/dist/elementor.js

    I’ve completed the troubleshooting steps of deleting and reinstalling the plugin and the security flag persists. I have contacted Hubspot with the relevant FAQ info on the error message (https://www.wordfence.com/help/scan/scan-results/#plugin-modified), and they have requested that I contact Wordfence for assistance.

    I don’t have this problem with any of my plugins so I am wondering if this is a known issue with the Hubspot plugin, or if it’s something unique to my configuration. Do you have any suggestions, or would you be able to reach out to Hubspot? Basically I’m ignoring this warning (personally, not pressing the ignore button) for now, which is a shame because if those files were to become legitimately modified, I may miss it.

    Thank you!

Viewing 6 replies - 1 through 6 (of 6 total)
  • Hi J.
    Having the same issue here so please keep this updated with anything you find.
    Alex

    Plugin Support wfpeter

    (@wfpeter)

    Hi @jleeacculynx, thanks for making us aware of this.

    After looking at their last plugin updates, these files were updated along with the rest of the plugin 3 weeks ago so don’t seem to hint at being changed in the mean time. However, I have seen tiny differences (with other plugins) sometimes not accompanied with a version number update by the developer – which can throw this error in Wordfence.

    Are you able to check the “View Differences” button to see what the alleged changes were? Let me know what the differences are if you’re seeing any. If both of the files are reporting identical, it should be safe to ignore as a false-positive.

    Thanks,

    Peter.

    Thread Starter J

    (@jleeacculynx)

    Hi @wfpeter thank you for your reply. The “View Differences” show completely different results for the original vs modified. Here is an example of the original for wp-content/plugins/leadin/js/src/entries/elementor.js which has everything basically commented out:
    Before:

    import { initBackgroundApp } from '../utils/backgroundAppUtils'; 	
    // import { getContactProperties } from '../properties/propertiesApi'; 
    function init() { 
    // getContactProperties(); 
    }
    initBackgroundApp(init); 

    The “Modified” is 59 lines long with tons of code inside. I took a screenshot but don’t see how to attach a photo to this forum.

    wp-content/plugins/leadin/js/dist/elementor.js has more code but again it’s completely different in the before and after.

    Plugin Support wfpeter

    (@wfpeter)

    Hi @jleeacculynx, you can include screenshots (and obscure/crop sensitive information if necessary) at Snipboard and paste the URL here. It might be helpful in this case to see the differences before I commit to whether it really is a false-positive or not.

    Thanks again,

    Peter.

    Thread Starter J

    (@jleeacculynx)

    @wfpeter
    here’s the smaller one: https://snipboard.io/9CvrGg.jpg

    The other file wouldn’t upload. I wonder if it’s too big. jpg of the screenshot is still 6.8MB. I cropped it down until it was 2MB and chopped off tons of the info an it’s still not uploading. Let me know if you have any ideas or if you need to see that one. I wonder if you would be able to reproduce this issue in a sandbox environment? It’s a free plugin.

    Thank you again for your attention.

    I am having the same issue on websites with HubSpot plugin

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Hubspot Plugin File Changes’ is closed to new replies.