Unpublished changes being detected and warning flags from WordFence

  • I received an email this morning from the WordFence plugin that Twenty Twelve files on my site had been modified, despite having only installed it in the last week (as part of the core update to v3.5).

    Wordfence reported the following as being the difference between the repository and in-site versions …

    in – /themes/twentytwelve/languages/twentytwelve.pot

    repository version –

    5	"Project-Id-Version: Twenty Twelve 1.1\n"
6	"Report-Msgid-Bugs-To: https://www.ads-software.com/tags/twentytwelve\n"
7	"POT-Creation-Date: 2012-12-07 21:19:18+00:00\n"

143	#. #-#-#-#-# twentytwelve.pot (Twenty Twelve 1.1) #-#-#-#-#

    on-site version –
    `5 “Project-Id-Version: Twenty Twelve 1.0\n”
    6 “Report-Msgid-Bugs-To: https://www.ads-software.com/tags/twentytwelve\n”
    7 “POT-Creation-Date: 2012-12-07 21:19:18+00:00\n”

    143 #. #-#-#-#-# twentytwelve.pot (Twenty Twelve 1.0) #-#-#-#-# ‘

    As these are the only changes in the file (there are no content changes – only version changes), it would seem that someone has jumped the gun on updating the file in the repository. A bit more discipline is needed there.

    As there is no published update to Twenty Twelve, and all but the .pot file still having the same version as the installed one, I’ll instruct WordFence to ignore the discrepancy until further changes take place … but I should not have to be doing this!

    I bring this to your attention as over the last couple of years I’ve had several domains hacked with malware injected to .pot files, therefore I’m a tad sensitive about unauthorised changes to those files.

    Please take a little more care when upgrading file versions without pushing a version upgrade for the theme/plugin as a whole – the warning emails are not good for my coronary condition.

    Thanks

Viewing 4 replies - 1 through 4 (of 4 total)

  • This happened to me too.

    terrisi

    (@terrisi)

    This same thing is happening to me on two separate sites. Wordfence made the notification and cites the same repository version as noted by gazouteast above BUT my onsite version shows:
    1 # Copyright (C) 2013 the WordPress team
    5 “Project-Id-Version: Twenty Twelve 1.1\n”
    7 “POT-Creation-Date: 2013-01-01 00:19:44+00:00\n”
    11 “PO-Revision-Date: 2013-MO-DA HO:MI+ZONE\n”
    143 #. #-#-#-#-# twentytwelve.pot (Twenty Twelve 1.1) #-#-#-#-#

    What is going on???

    Exactly the same thing just happened to me as terrisi – same creation-date, etc. Also notified by Wordfence which picked up the difference 1 hour ago. I’ve done no changes to the themes. Nothing else seems untoward with the site.

    @terrisi – did you figure out what happened?

    @triathlon
    I did not really figure it out but checked out other posts on the support forum. I believe @gazouteast has assessed it correctly. I got the message from Wordfence for the twentyeleven and twentytwelve .pot files. I used the same solution — to ignore.
    Since doing that, have had no further warnings of that type.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Unpublished changes being detected and warning flags from WordFence’ is closed to new replies.