Wordfence warning : core Backupguard files modified

Dear @rajk748 ,

Thanks for reporting an issue.

In order to investigate, we will need additional information, such as the versions for both WordFence and BackupGuard plugins.

If you use the pro versions of the plugins, kindly ask you to contact us via [email protected] email address, since it is allowed to discuss issues or requests concerning the pro version of the plugins in the forum.

Thanks,

BackupGuard Team

Dear BackupGuard Team
Thank you for your reply.
The versions are :

BackupGuard Version: 1.6.8.7
Wordfence Version : 7.6.0

I am not using the pro version.

Rajendra

Dear @rajk748 ,

Thanks for getting back to us.

May we know if the error appears after taking any actions with one of the plugins?

We want to reproduce the issue and that is why we need to reap the exact steps.

Thanks beforehand for your collaboration.

Thanks,
BackupGuard Team

Dear BackupGuard Team,

As both the apps run in the background, no action was taken to cause the error. I came to know about it when I received warning e-mail from Wordfence. I also received the automatic backup email after that. So it’s possible that BackupGuard was taking an automatic backup at the time, but I cannot be sure.

Hope this helps.
Thanks,
Rajendra

Good day and thank you for your help.
I also use Wordfence. The code (seems to be about ‘CloseSummer22Banner’) that is causing the error
wp-content/plugins/backup/BackupGuard.php
524 add_action(‘wp_ajax_backup_guard_closeSummer22Banner’, ‘wp_ajax_backup_guard_close_summer22_banner’); 538 `wp_die();
539 }
540
541 function wp_ajax_backup_guard_close_summer22_banner()
542 {
543 check_ajax_referer(‘backupGuardAjaxNonce’, ‘token’);
544 SGConfig::set(‘SG_CLOSE_SUMMER22_BANNER’, 1);`

wp-content/plugins/backup/public/js/sgbackup.js
44 sgBackup.closeSummer22Banner();

218	           }; 	 	 
219	           ajaxHandler.run(); 	 	 
220	       } 	 	 
221	   ); 	 	 
222	}; 	 	 
223	 	 	 
224	sgBackup.closeSummer22Banner = function () { 	 	 
225	   jQuery('.sg-close-summer22-banner').bind( 	 	 
226	       'click', 	 	 
227	       function () { 	 	 
228	           var ajaxHandler = new sgRequestHandler( 	 	 
229	               'closeSummer22Banner', 	 	 
230	               { 	 	 
231	                   token: BG_BACKUP_STRINGS.nonce 	 	 
232	               } 	 	 
233	           ); 	 	 
234	           ajaxHandler.callback = function (response, error) { 	 	 
235	               jQuery('#sg-summer22-banner').remove();

1032	jQuery(window).on("resize", function () { 	 	 
1033	   setSummerButtonPosition(); 	 	 
1034	}); 	 	 
1035	 	 	 
1036	jQuery(window).on("load", function () { 	 	 
1037	   setSummerButtonPosition(); 	 	 
1038	}); 	 	 
1039	 	 	 
1040	function setSummerButtonPosition(file) { 	 	 
1041	 	 	 
1042	   let mainWidth = 1900, 	 	 
1043	       mainLeft = 6.15, 	 	 
1044	       customWidth = jQuery('#summer22background').width(), 	 	 
1045	       customLeft = 0, 	 	 
1046	       windowWidth = jQuery(window).width(); 	 	 
1047	 	 	 
1048	   if (windowWidth < 1440) { 	 	 
1049	       jQuery('#summer22button').css('maxWidth', 130); 	 	 
1050	       mainLeft = 10; 	 	 
1051	   } else { 	 	 
1052	       jQuery('#summer22button').css('maxWidth', 193); 	 	 
1053	   } 	 	 
1054	 	 	 
1055	   customLeft = (customWidth * mainLeft) / mainWidth; 	 	 
1056	 	 	 
1057	   jQuery('#summer22button').css('right', customLeft + '%'); 	 	 
1058	} 	 	 
1059

…wordpress/wp-content/plugins/backup/public/include/header.php (actually begins row 3 but does not C&P)

6	$pluginCapabilities = backupGuardGetCapabilities(); 	 	 
7	 	 	 
8	if ($pluginCapabilities == BACKUP_GUARD_CAPABILITIES_FREE && !$closeSummer22Banner && !$isAdsEnabled) { 	 	 
9	   include_once(SG_NOTICE_TEMPLATES_PATH . 'summer22.php'); 	 	 
10	}

wp-content/plugins/backup/public/css/bgstyle.less.css

10023	/* "summer22" banner START */ 	 	 
10024	#sg-summer22-banner { 	 	 
10025	   position: relative; 	 	 
10026	   margin-top: 10px; 	 	 
10027	   margin-right: 20px; 	 	 
10028	} 	 	 
10029	 	 	 
10030	#sg-summer22-banner .sg-close-summer22-banner { 	 	 
10031	   position: absolute; 	 	 
10032	   cursor: pointer; 	 	 
10033	   right: 5px; 	 	 
10034	   top: 5px; 	 	 
10035	   background-image: url(../img/close.png); 	 	 
10036	   width: 15px; 	 	 
10037	   height: 15px; 	 	 
10038	   background-size: 100%; 	 	 
10039	   background-repeat: no-repeat; 	 	 
10040	} 	 	 
10041	 	 	 
10042	#sg-summer22-banner img { 	 	 
10043	   width: 100%; 	 	 
10044	   height: auto; 	 	 
10045	   outline: none !important; 	 	 
10046	} 	 	 
10047	 	 	 
10048	#sg-summer22-banner a, 	 	 
10049	#sg-summer22-banner a:hover, 	 	 
10050	#sg-summer22-banner a:focus { 	 	 
10051	   display: block; 	 	 
10052	   outline: none !important; 	 	 
10053	   box-shadow: none !important; 	 	 
10054	   max-width: 193px; 	 	 
10055	   position: absolute; 	 	 
10056	   top: 50%; 	 	 
10057	   right: 6.15%; 	 	 
10058	   transform: translate(-0%, -50%); 	 	 
10059	   -ms-transform: translate(-0%, -50%); 	 	 
10060	} 	 	 
10061	/* "summer22" banner END */

Thanks @nohlaorg for your reply.
I am wondering how the core files were modified
if there was no plugin update.

I found a record it was updated 2 days ago, so around 8/21.

Dear @rajk748 and @nohlaorg ,

May we kindly ask you to open the System Info. of the BackupGuard plugin section and send us the screenshot, so we can check, please?

https://prnt.sc/c3afZB1ItgWI

Thanks in advance.

Best,
BackupGuard Team

Dear BackupGuard Team,

Sorry, I got overcautious and deleted the plugin after the Wordfence warning.
I have reinstalled it. Here’s the system info.

https://prnt.sc/81IKqtyFB9QD

Hope it helps.
Thanks,
Rajendra

Dear @rajk748 ,

Thanks a ton for sharing the requested file.

May we kindly ask you to run the WordFence scan manually once again to see if you are getting the same error?

Please, keep us posted on things.

Best,
BackupGuard Team

Dear BackupGuard Team,

Thank you for your reply.
I ran the manual scan and it was clean. No warnings.

Best,
Rajendra

• This reply was modified 2 years, 6 months ago by rajk748.

Dear @rajk748 ,

Thanks for trying.

Kindly ask you to keep an eye on the scans you run and get back to us, once you face the issue again.

Best,
BackupGuard Team

Dear BackGuard Team,

Thank you for your help.
I will keep an eye on warnings.

Regards,
Rajendra

Dear @rajk748 ,

Thank you too for the elaboration.

We will be glad to assist if anything else comes up.

Best,
BackupGuard Team