[Resuelto] Wordfence flagging toolset blocks as having malicious code

[Autor]

Mensajes

[scottL-3]

Wordfence is reporting this on multiple sites:

Critical Problems:
* File appears to be malicious or unsafe: wp-content/plugins/toolset-blocks/vendor/toolset/common-es/public/toolset-common-es-frontend.js

[Minesh]

Hello. Thank you for contacting the Toolset support.

When using optimization plugins, we already mentioned to exclude that file:
- https://toolset.com/faq/how-to-use-optimization-plugins-with-toolset/#toolset-resource-files

Can you please share a zip of the "toolset-blocks" plugin that contains the file you mentioned and our Devs will check further. You can upload the zip with any file sharing service and send me link to download it.

[scottL-3]

You can close this ticket. The malicious code seems to have come in through a non-Toolset vulnerability and affected a couple js files in different plugins including Toolset Blocks and Views.