Archived topic
Possible malware found
3 replies · Started by miednr on September 28, 2021
Hello,
I am using SecuPress Security for malware checking and I received this warning:
/wp-content/plugins/gp-premium/elements/class-hooks.php Possible malware found Found Signature: eval('?>'
Is this a false positive? Or what should I do?
Thanks!
Hi there,
its kind of a 'false positive' the eval() function is being used to allow PHP to be saved in the editor but ONLY in the GP Hook Element. Hence it gets flagged as that could be exploited if a hacker got into your WP Admin. But if they did make it into wp admin then they could add malicious code in may ways, so it doesn't create any new risks.
If you're not using the GP Hooks, you can of course disable the Hook Element module. Or Disallow PHP Execution on your server.
Thanks David!
You're welcome
