Archived topic
WP-Cerber plugin with GP Premium plugin / alert
5 replies · Started by imke on December 2, 2021
concerning: suspicious coding in GP Premium Plugin
Hi Team,
I scanned my website with the WP-Cerber Plugin and an alert showed up because of problems with the integrity (highly vulnerable coding!) in the GP Premium plugin?
Made a screenshot, but can't send it with this message.
Best regards, Imke
Hi there,
save you screenshot to a share drive eg. drop box, google drive or into your WP Media Library.
You can then provide us with the share URL in the Private Information field.
Hi David .... underneath the link ;)
Hi there,
These are all false positives.
Not sure what they're flagging in the first file - there aren't any scary function in this file.
The two hook files are likely being flagged because of their use of the eval() function. This function can be bad, but we're using it how it was designed to be used in these files. Nothing scary/sketchy about it.
Let us know if there's any more info on the first file. It could be flagged because of the sha1() function, but again we're using it as it should be used.
Thanks!
Hi Tom,
thanks. It's good to know.
Best regards, Imke
No problem! :)
