[Resolved] Suspicious codes threaten security?

[Manuela]

Hi

Today my security program reports several suspicious codes in the theme Generate Press Premium plugin.

It was reported as high risk:

/gp-premium/hooks/functions/hooks.php
Suspicious code instructions found

Line 22: eval
May be used to execute malicious code on the web server. Pairing with base64_decode function indicates malicious code.

Line 30: add_action
Line 38: add_action
Line 46: add_action
Line 54: add_action
Line 62: add_action
Line 70: add_action
Line 78: add_action
Line 86: add_action
Line 94: add_action
Line 102: add_action
Line 110: add_action
Line 118: add_action
Line 126: add_action
Line 134: add_action
Line 142: add_action
Line 150: add_action
Line 158: add_action
Line 166: add_action

/gp-premium/site-library/classes/class-site-import-impage.php:
Suspicious code instructions found

Line ?: FROM
Line ?: WHERE
Line ?: FROM
Line ?: WHERE
Execute arbitrary command on the web server (BCTK)

/gp-premium/elements/class-hooks.php:
Suspicious code instructions found

Line 192: add_filter
Can alter any website data or website settings

Line 195: add_action
Line 215: eval
May be used to execute malicious code on the web server. Pairing with base64_decode function indicates malicious code.

I am not a technician and need a simple solution.

Should I delete the php files? If so, it will destroy the layout, right?

I assumed Generate Press Premium is clean?

Thanks a lot for your help

Manuela

[Fernando]

Hi Manuela,

Yes, GP Premium downloaded from http://generatepress.com/account/ is 100% safe and clean.

There’s no malicious code in it.

The malicious codes reported by your security system are normal codes used in WordPress.

You shouldn’t delete those files. It will break stuff if you do.

Hope this clarifies! 🙂

[Manuela]

Hello Fernando

Thank you, that puts my mind at ease. I didn’t delete the files.

Best Wishes
Manuela

[Fernando]

You’re welcome, Manuela!

[Author]

Posts