wordfence
Detect unrecognized WordPress core files during scans
The Wordfence plugin currently detects unexpected files in WordPress core as part of its scanning functionality. CLI does not currently provide this functionality. Consider implementing this functionality in CLI either as part of one of the existing scans or as a separate subcommand.
@sadhnamahale brought this up in #310.
@akenion, I appreciate your support. We will wait for the new version and hope it provides the correct report. Additionally, I have a question regarding the plugin: Is there an option to automate the scan at specific intervals? Sometimes, we receive alerts from the central system indicating that the site has been scanned, even though we didn’t manually initiate it. Could you clarify if this process is automated or how it works?
Thank you
@sadhnamahale The plugin automatically runs a quick scan daily and a full scan every 72 hours when using a free license. With a Premium license, the scan schedule is configurable. Here is some documentation around scan scheduling within the plugin: https://www.wordfence.com/help/scan/scheduling/
For future plugin-related questions, you can post on the forums here: https://wordpress.org/support/plugin/wordfence