• I’m using Wordfence 7.0.5.

    When viewing Live Traffic I’ve started seeing “404 Not Found” entries for image files in /wp-content/plugins/wordfence/css/images.

    For example, I’m seeing “404 Not Found” entries for /wp-content/plugins/wordfence/css/images/ui-icons_ec882f_256x240.png.

    In the css/images dir, I have:

    • ui-icons_222222_256x240.png
    • ui-icons_cd0a0a_256x240.png
    • ui-icons_fbe569_256x240.png
    • ui-icons_fff_256x240.png

    So, it looks like you either forgot to include that ui-icons color in 7.0.5, or your hand-rolled jquery-ui.xxx.css theme CSS is includes the wrong “themed” rules.

    This is no big deal, but I’ve learned to pay particular attention to 404 Live Traffic entries because many of the hack attempts against my sites are probes for resources in vulnerable plugins…and I have to do a double-take when I see these Wordfence jQuery-UI related 404 entries to make sure they’re not hacker probes.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Hi @pbiron,

    Could it be related to caching? The plugin’s old files might still be cached on your server or browser.

    Please make sure to clear cache from:
    – Any caching plugin.
    – A plugin that has JS/CSS minify option.
    – Cloudflare cache (in case you are using it).

    Your hosting provider might also have its own caching system; make sure to purge the cache from there too.

    Finally, clear your browser cache –you might need to switch to another browser temporarily for testing.

    Thread Starter Paul Biron

    (@pbiron)

    As far as I can tell, it’s not related to caching: I’m not using any caching plugins, no proxies, etc.

    The following might help you identify the problem.

    The CSS file in question is: /wp-content/plugins/wordfence/css/jquery-ui.min.1518630427.css?ver=7.0.5, which is enqueued by wordfence::menu_tools(), wordfence::menu_options(), and wordfence::menu_firewall().

    The CSS rule in question is:

    .ui-state-highlight .ui-icon {
        background-image: url("images/ui-icons_ec882f_256x240.png")
    }

    which appears on line 1037 of the “pretty printed” version of the file in Chrome’s debugger [Windows Version 64.0.3282.186 (Official Build) (64-bit)].

    I’m not positive about the following, but I think the problem surfaces when there are problems identified in scan. I’m not positive because no sites on which I’m using Wordfence have scan problems at the moment, so I can’t see it in practice, but searching thru the Wordfence sources identifies that as the most likely culprit. Under some circumstances, DataTables adds the ui-icon class to some rows in the “tables” it’s managing (<div id="wfIssues_dataTable_new"> and <div id="wfIssues_dataTable_ignored"> in this case), and that triggers the attempted loading of the jquery-ui image in question.

    Also, I think I had originally installed one of the last v6 versions of Wordfence and then upgraded to v7.0.5; so it’s possible that the CSS file is question is somehow left over from the v6 install, but that is unlikely because I’ve got v7.0.5 installed on about 10 different sites and jquery-ui.min.1518630427.css exists on all of them.

    I hope this helps.

    Thread Starter Paul Biron

    (@pbiron)

    I just upgraded to Wordfence 7.1.0 (on 1 site) and jquery-ui.min.1519855237.css still contains the rule that references the non-existent images/ui-icons_ec882f_256x240.png.

    Thread Starter Paul Biron

    (@pbiron)

    do you have any update on this report?

    Hi @pbiron,

    Sorry about the delayed update.

    Does the browser console show any relevant information?

    Could you try temporarily switching to a default theme –if you’re not already using one– and disabling all other plugins then reactivating them one by one to see if the issue persists?

    To do so I recommend the “Health Check” plugin which allows you to disable all plugins and switch to a default theme, but only for your user.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Wordfence jQuery-UI CSS images not found’ is closed to new replies.