Unknown files flagged after botched upgrade to WP 5.1

  • Resolved John Longtrail

    (@eldaveer)


    5 years, 9 months ago

    I attempted to update WordPress to 5.1 yesterday and I had some problems with it.

    The site now says that WordPress is up-to-date at 5.1. But it also says:
    An automated WordPress update has failed to complete – please attempt the update again now.

    I tried, but it does not work. That message remains. I tried to do a reinstall, but the above message is still there.

    I am using a plugin called Wordfence that provides security for my site. I just got an automated email from the plugin telling me the following:

    High Severity Problems:
    * Unknown file in WordPress core: wp-includes/js/codemirror/jshint.js
    * Unknown file in WordPress core: wp-includes/js/tinymce/wp-tinymce.js.gz
    * Unknown file in WordPress core: wp-includes/random_compat/random_bytes_openssl.php

    Are these files leftover from the problematic update of yesterday? What do I need to fix this?

    Thanks for any help anyone can provide!

Viewing 6 replies - 16 through 21 (of 21 total)
  • Moderator James Huff

    (@macmanx)

    Hm, probably something wrong with Softaculous’s upgrade package then. ??

    Unfortunately, we have no control over how they operate.

    Seems my host runs Softaculous.

    Anonymous User 16911206

    (@anonymized-16911206)

    Same here exact same 3 files.. with latest update!!

    Wordfence States > Issues Found February 26, 2019 >
    This file in particular (wp-includes/random_compat/random_bytes_openssl.php) gives reference to this link in its code “https://www.openssl.org/”

    I note previous comment by James Huff he gives reference to softaculous in which i have installed wordpress through on my website..
    I thought in reference to link above “https://www.openssl.org/” i thought it may be a cloudflare or either my server host’s supplied SSL Cert but my other site has no Cloudflare neither server host SSL Cert “its http” but it was also installed using softaculous now with same issue.. so i second its possibly softaculous!!

    In 1 of my sites i re-installed the update via the dashboard as recommended in comments..
    Softaculous pulls it directly yeah?? So it seems?
    Too quote:

    Update WordPress

    Downloading update from https://downloads.www.ads-software.com/release/wordpress-5.1-no-content.zip…

    None of the 3 issues found this time around!!
    Note: Before & currently my wordpress release are set to download automatically (through softaculous?).
    Tried too shed more light on this drama as it is a concern we might be hacked or the wordpress install was compromised on your end?

    Thread Starter John Longtrail

    (@eldaveer)

    I don’t believe I installed WordPress originally through softaculous–I don’t remember–but I could be wrong and it is definitely available in the CPanel for my site.

    I upgraded to WP 5.1 from the dashbord.

    Thanks, James, for answering my question about whether reinstalling would affect my theme.

    Herzog

    (@therewardboss)

    i got the same error. I think mine was updated by the plugin Easy Updates Manager. I def did not do it myself. Pressing the reinstall 5.1 button then scanning again cleared the errors.

    • This reply was modified 5 years, 9 months ago by Herzog.
    anonymized-14293447

    (@anonymized-14293447)

    random_compat, sodium_compat, theme_compat, pomo, text,… and so many others. So stop pretending, will you? They are all some crap coming with the new block feature… they are right there in the Core for everyone to see, and they take a lot of diskspace!

Viewing 6 replies - 16 through 21 (of 21 total)
  • The topic ‘Unknown files flagged after botched upgrade to WP 5.1’ is closed to new replies.