Hi Eli,
The detection came from the Beaver Builder plugin: Beaver Builder Class.
I contacted Beaver Builder support, and they confirmed it’s a false positive detection. This file hasn’t been changed in the last five years.
Can you please check this?
Screenshot - https://app.screencast.com/CsKi5BFNhediD
File - class-fl-builder-extensions.php
Hi Eli,
Here’s another one, but this time from Shortpixel – /wp-content/plugins/shortpixel-image-optimiser/build/shortpixel/PackageLoader.php
Similar to Beaver Builder, ‘trailingslashit’ section:
$fullpath = trailingslashit($dir) . trailingslashit($classpath) .$filename;
if (file_exists($fullpath)) {
include_once $fullpath;
}
}
}
}
Thank you for reporting this issue. I have confirmed that this is a False Positive and I have released a new definition update that fixes this issue so that the safe usage of the path building formula will be omitted from future scans. Please download the latest definition updates and confirm that this plugin file is no longer detected as a Known Threat.