Unknown file in WordPress core

I don’t know whether to laugh or cry about this new Wordfence scanning feature. It’s sure serving to call out developers who cause hundreds or even thousands of files to be uploaded and stored in the wrong place related to WordPress core. On the other hand, will the developers pay any attention and learn to behave themselves or are we publishers going to be sitting here at our desks for the next three years spending hours analysing files that the scan finds? I went ahead and used the nuclear option of deleting all the “Unknown” files Wordfence found then testing if my site worked (it did, shew), but that’s most certainly not the recommended approach! Really, just another example of how messed up the WordPress plugin and theme system is, IMHO.

Honestly, thanks Wordfence for yet another features that calls out the flaws in the system.

MTN

I’m totally new to WordPress. I installed it today using hosting company’s installer, then immediately updated from version 4.5.2-217 to version 4.5.3. However, my first Wordfence scan (about 10 mins after installing WordPress with Wordfence being my only plugin) threw up the following:

* Unknown file in WordPress core: wp-admin/includes/upgrade.php.orig
* Unknown file in WordPress core: wp-admin/plugin-uploader.php
* Unknown file in WordPress core: wp-admin/theme-uploader.php
* Unknown file in WordPress core: wp-admin/uploader/pclzip.lib.php
* Unknown file in WordPress core: wp-admin/uploader/upload.php
* Unknown file in WordPress core: wp-includes/functions.php.orig

Hosting company says no problem server side and nothing to do with their WordPress installer.

Can I just delete these files?

It would be good for WordFence to confirm these are good file changes.
My test site shows them on PLESK with no outside logins as yet.
Peter

Hi all,

Just my 2 cents, I searched and found this thread after notifying by WordFence about the existence of some file with following message:

“Unknown file in WordPress core: wp-admin/includes/upgrade.php.orig”

The web hosting ISP use Plesk and I installed WordPress through Plesk too, just so you guys know.

Kind Regards,

Ben

• This reply was modified 7 years, 6 months ago by KC. Reason: Correct input error