[Plugin: Ultimate Security Checker] Hashes file not found

I’m entering the same problem as well…

Thank you!

Having the same issue…

WordPress 3.4.2 – USC 2.7.8

I’m now having this same issue on WordPress 3.4.2, USC 2.7.8.

Prior to this error I was receiving a different error… still no response to that forum post:
https://www.ads-software.com/support/topic/php-warning-and-php-fatal-error-on-ultimate-security-checker-278?replies=1

It has been several months since the file scan feature has worked for me.

Same issue here, same versions of WP and USC.

Having the same issue. Same versions, as well.

+1

The plugin tells me to wait for an update before the file scan will work. Clicking on it anyway gives this error.

Has anyone found a fix? A few of my sites got hacked and it seems like disabling file scanners makes a good first step in hacks. Maybe there’s a vulnerability in the plugin?

Thoughts?

It looks like the vendor of this plugin doesn’t have a hashes file for 3.4.2:

$hashes = dirname(__FILE__) . ‘/hashes/hashes-‘. $wp_version .’.php’;
if ( file_exists( $hashes ) )
include( $hashes );
else{
return array(‘status’=>’error’, ‘data’=>’Hashes file not found!’);

REF: https://plugins.svn.www.ads-software.com/ultimate-security-checker/tags/2.7.0/securitycheck.class.php

I found a post with a different plugin that uses the same hashes file format:

https://www.ads-software.com/support/topic/plugin-exploit-scanner-hash-file-for-342?replies=2

Using the paste bin site raw data, I was able to crate and upload the hashes-3.4.2.php file to /wp-content/plugins/ultimate-security-checker/hashes

Everything works fine now.

Please NOTE: I didn’t sanity check the hashes. As the hashes came from pastebin, I would recommend some caution.

Thanks.