Same here, and those files are legitimate WordPress core files, so it appears to be massive false positives or some other bug in WordFence.
Hello all –
I have found that if you are using the Free version of Wordfence, the “Rules” are only updated every 30 days – which means that this is completely out of sync with the release of WP 6.7.
If you go to Wordfence -> All Options -> Advanced Firewall Options -> Manually Refresh Rules and then run a new Scan, this resolves the issue (tested one site thus far and seemed to do the trick).
Wordfence changed this a bit ago where the rules are only updated once every 30 days – not sure this was a great idea on Wordfence’s part.
Thanks @prrecious for reaching out and thank-you for your patience.
This issue was ultimately unrelated to the firewall rules being updated and it was remediated as we made changes on our side. The issue was due to one of our integrations that was incorrectly reporting the files as unknown. This was fixed earlier today and subsequent automatic or manual scans should no longer show the files as unknown. We have some documentation on these scan results here in general for reference, and restoring deleted or repaired files from a backup if the site has issues is the best option: https://www.wordfence.com/help/scan/scan-results/#unknown-file-in-wordpress-core
Peter.
Further clarification that this had nothing to do with firewall rules and what the underlying issue was and how we’ve fixed it:
https://wordpress.org/support/topic/ouch-unknown-file-in-wordpress-core-wp-v6-7/#post-18133181
Regards,
Mark Maunder – CTO @ Wordfence
@wfpeter Thanks! The Results are still in my list – should I press DELETE all deletable files or REPAIR all repairable files to make them go away? 🙂 New scan seems to work fine!
