Well ... I don't know the content of the files as my PC even refused to edit them. I mean I'm not speaking about lines of code injected in already existing files. I'm speaking about completely new files and, apart from the content of these files, I expected from wordfence a comparative scan able to detect strange named php files on a core folder of the wordpress installation, in particular on a css folder where php files shouldn't be at all.
↧