Yes I know this guide and all the security measures and have done all of it.
But it remains that a core WP program (/wp-admin/includes/upgrade.php) is doing something that it shouldn’t.
And Securi does not complain about it…
So, any other suggestions?