• Resolved axiosil

    (@axiosil)


    Hi,
    For the last few days I got this message:
    WordPress core file modified: wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php
    Filename: wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php
    File Type: Core
    Issue First Detected: 48 secs ago.
    Severity: Critical
    Status New
    This WordPress core file has been modified and differs from the original file distributed with this version of WordPress.

    I’m concerned, but I have 2 fold questions:
    1. Is this a file that was not published yet but it is ready in the repository for the next release of WordPress?
    2. is it save to to click on “Restore the original version of this file”?
    Note 1:
    The diff between the 2 files is very long…
    one of the lines indicates –
    311 * @ since 4.7.2 305 * @ since 4.7.0

    On the left is the original (ver 4.7.2) and on the right is mine (ver 4.7.0).
    Note 2:
    On my other 3 sites I do not get this ,message.
    Thank you

    Addition –
    I’ve checked my other 3 sites and the file wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php was not flagged and it has @ since 4.7.0

    • This topic was modified 7 years, 11 months ago by axiosil.
    • This topic was modified 7 years, 11 months ago by axiosil. Reason: additional notes
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfphil

    (@wfphil)

    Hello,

    To answer your questions:

    In the Scans to include section on the Options page you will see the setting for Scan core files against repository versions for changes. This checks that the core WordPress files of the version of WordPress that you have installed matches the core files in the WordPress repository for that version of WordPress.

    Yes click on the link: Restore the original version of this file

    Without looking at the file changes it would be a very good idea to go through the procedure to clean a hacked site as soon as possible as outlined in our learning center below:

    https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/

    • This reply was modified 7 years, 11 months ago by wfphil.
    Thread Starter axiosil

    (@axiosil)

    Thank you @wfphil
    The core file was restored and all OK now.
    Resolved

    Plugin Support wfphil

    (@wfphil)

    Hello,

    Glad to hear this has been solved for you.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘WordPress core file modified’ is closed to new replies.