Theme Files Tagged As Threats, etc.

Home Forums Support Forum Theme Files Tagged As Threats, etc.

This topic contains 1 reply, has 2 voices, and was last updated by  Anti-Malware Admin 11 years, 4 months ago.

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #781

    Buck S.
    Member

    Hi,

    I’m a new user and registrant. Just ran your plugin for the first time on our blog and have the following questions that I’m hoping you can address:

    1. Upper right corner of plugin’s screen shows “Plugin Updates for WP 3.5.2″ and then in red it shows: “Unable to find your plugin version!”

    Is that a problem and what do I do about it? My WP install and all other plugins are up to date.

     

    2.  The following 3 theme files from our WP theme named SUFFUSION were highlighted as “potential threats” and I wanted to point it out to you in case you’re aware of them being or not being threats (our domain is hashed for privacy, sorry):

    ?/home2/XXXXXXXXX/public_html/blog.XXXXXXXXX.com/wp-content/themes/suffusion/admin/js/jscolor/jscolor.js

    ?/home2/XXXXXXXXX/public_html/blog.XXXXXXXXX.com/wp-content/themes/suffusion/scripts/ie-fix.js

    ?/home2/XXXXXXXXX/public_html/blog.XXXXXXXXX.com/wp-includes/js/tinymce/tiny_mce.js

    3. And finally, THANK YOU for the plug in because it seems to have found a real exploit that it removed. We had no idea that it was there, the site has passed multiple online scans. This is what it found:

    Backdoor Scripts

    !/home2/XXXXXXXXX/public_html/blog.XXXXXXXXX.com/d3a41dfb02346c8cc72e1163f06b37f746a557e4.php

    Would appreciate any advice you can offer. Incidentally, we always donate after a trial period to make sure we’re keeping a plugin, theme, etc.

    Thank you in advance.

    B

    #785

    Anti-Malware Admin
    Key Master

    I fixed that message: “Unable to find your plugin version!”. It was just because my website did not have the right version number for the last release I just uploaded. Thanks for bringing that to my attention.

    Those three potential threats are probably safe. They are most likely popping up because the contain the eval function which can be used to display execute malicious code but not so much in JS files.

    Please let me know if I can be of further assistance.

    Aloha, Eli

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.

Comments are closed.