• Resolved Frenchy

    (@k2300)


    Hello here is the mistake he’s on your plugin with wordfence?

    This file may contain malicious executable code:
    Filename: wp-content/plugins/wp-cerber/dashboard.php
    File type: Not a core, theme or plugin file.
    Issue first detected: 57 mins ago.
    Severity: Critical
    Status New
    This file is a PHP executable file and contains an eval() function and base64() decoding function on the same line. This is a common technique used by hackers to hide and execute code. If you know about this file you can choose to ignore it to exclude it from future scans.

    https://www.ads-software.com/plugins/wp-cerber/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author gioni

    (@gioni)

    Hi!

    I can’t comment on that because I don’t see line number, where is silly Wordfence found this issue. Information without line numbers is useless. So, sometimes Wordfence is working nice, sometimes isn’t.
    Anyway, I don’t use mentioned functions in the code of the plugin.
    I think, Wordfence treated description of my other plugin as PHP code. That’s ridiculous. You can check out that description on the Help tab of WP Cerber Settings page.

    Thread Starter Frenchy

    (@k2300)

    Thank you Gioni ??

    Plugin Author gioni

    (@gioni)

    Follow up note. If you want to find out where is particular unsafe function like eval() or base64() is located you can scan any plugin with the Plugin Inspector. It gives you clear picture about code of the plugin.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Urgent request assistance please’ is closed to new replies.