I received this result in Wordfence. Please advise ASAP.
This file may contain malicious executable code: wp-content/plugins/td-composer/includes/tdc_ajax.php
Type: File
Filename: wp-content/plugins/td-composer/includes/tdc_ajax.php
File Type: Not a core, theme, or plugin file from wordpress.org.
Details: This file is a PHP executable file and contains the word “eval” (without quotes) and the word “base64_decode(” (without quotes). The eval() function along with an encoding function like the one mentioned are commonly used by hackers to hide their code. If you know about this file you can choose to ignore it to exclude it from future scans. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives.
Hi,
That would be a false positive, so in this case there is no reason to worry. They mention that the high sensitivity scan setting will often produce false positives
– http://prntscr.com/nwy21l
Thanks
