Topic: WP Authenticity Checker – Malicious code “base64” · BuddyPress.org

Skip to:: Content; Pages; Categories; Search; Top; Bottom

WP Authenticity Checker – Malicious code “base64”

subtract
Participant

@subtract

5 years, 9 months ago

Hello,

I have just installed BuddyPress (and bbpress) on my WordPress site in order to create a community site (for the moment only localhost).

I wanted to check the security of all my site, and thus installed WP Authenticity Checker. I was surprised to discover a lot of “Malicious code found”. Most of them are beginning with “base64…”. But I don’t understand how to correct all the “malicious code”. Can someone help me ?

I join some screenshots.

Thanks ! 🙂

Viewing 3 replies - 1 through 3 (of 3 total)

r-a-y
Keymaster

@r-a-y

5 years, 9 months ago

The BuddyPress ones are false positives.

subtract
Participant

@subtract

5 years, 9 months ago

Thank you for the answer.

What do you mean by that? This is not dangerous?
If it is the case, only those of buddypress are false positive?

r-a-y
Keymaster

@r-a-y

5 years, 9 months ago

The BP ones are not dangerous.

Your authenticity plugin just looks for anything using base64_encode(), which can be used for legitimate purposes. You’d have to audit the other plugins to determine if they are doing anything of mal intent.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.