I did get this today: See the details of these scan results on your site at: https://byringerike.no/wp-admin/admin.php?page=WordfenceScan Critical Problems: * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.5501-AB3R2BU6.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.3501-IUWOXSUZ.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.5001-67LXAUWE.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.1501-ZYE75D75.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.3001-KOP5KVUU.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.4001-3LONDIZE.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.8001-KXDXVEQZ.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.4501-MENT5OI5.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.2001-J5TJUVMV.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.15501-MRYPF2G5.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.0501-L3PWKTKV.js The malicious URL matched * File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.1001-ONIDCTA5.js The malicious URL matched Is this a false positive, or do i need to be worried? :-) Bent.

Mailware alert from WordFence

Basic Identity Group

I did get this today:

See the details of these scan results on your site at: https://byringerike.no/wp-admin/admin.php?page=WordfenceScan

Critical Problems:

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.5501-AB3R2BU6.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.3501-IUWOXSUZ.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.5001-67LXAUWE.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.1501-ZYE75D75.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.3001-KOP5KVUU.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.4001-3LONDIZE.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.8001-KXDXVEQZ.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.4501-MENT5OI5.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.2001-J5TJUVMV.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.15501-MRYPF2G5.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.0501-L3PWKTKV.js

The malicious URL matched

File contains suspected malware URL: wp-content/plugins/commandui/dist/plugins.1001-ONIDCTA5.js

The malicious URL matched

Is this a false positive, or do i need to be worried?

:-) Bent.

Calvin Alkan

Basic Identity Group

Hey, that's a false positive, nothing to worry about!

The file just containe a cached list of common plugins to accelerate the search, in the past WordFence did not like some URLs in there (just the ones listed in the plugin repo for the respective pl
ugin).

What version of CommandUI are you using?

Basic Identity Group

Thanks for answering, I´m using Versjon 1.10.

Best, Bent.