Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all articles
Browse latest Browse all 33289

Feature Request – Scan Database for Snippet Injection

$
0
0

Replies: 0

I had a site that had a redirect issue. WordFence, the host and other services all flagged the site as clean. It wasn’t until someone mentioned checking htaccess files that got me thinking about the time a snippet / Header & Footer plugin had redirection code in it.

This morning I had a WordFence alert about WPCode Lite (Insert Headers & Footers) needing an update. Upon checking the site the plugin wasn’t listed and the checked the file system and it was there. I got the admin url from another site and sure enough there was one active snippet that not only did the redirect, but also hid the plugin from the admin and the list of all plugins.

WPCode Lite, Code Snippet and Elementor are 3 plugins which I know allow for custom code / snippets to be added and then they write out the code – so this would live in the database and not the file system itself


Viewing all articles
Browse latest Browse all 33289

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>