Viewing 12 posts - 1 through 12 (of 12 total)
  • Author
  • #402946

    Running malware scan on Enfold theme 3.0.4 today 2/26/2015, we discovered a backdoor script: The script is located in:

    Can you please examine this vulnerability?

    Best Regards,
    Will Zell

    • This topic was modified 2 years, 8 months ago by  zellous.

    I just noticed that there is a job opening at for Help Desk person. So perhaps I have a wait ahead of me.
    Job description: “Help our customers by answering their support requests in our support forum”


    what scan?


    Anti-Malware from GOTMLS.NET a plugin that is on the WP site.

    Here is an image for you:

    • This reply was modified 2 years, 8 months ago by  zellous.


    It’s most likely a false positive with the scanner your using. This happens quite often with malware scanners, etc. Enfold is used on thousands of websites so if there were any problems we would know about it very quickly. Do you have anymore information on what the scanner said?

    We went ahead and flagged this for Kriesi though.


    • This reply was modified 2 years, 8 months ago by  Elliott.
    This reply has been marked as private.

    Hi Iwan Szomoru!

    Were you using the latest version of Enfold (3.0.8)?



    Hi Josue,

    I am using version 3.0.4
    wordrpress 4.1

    With regards




    To prevent this kind of issues please make sure to have the theme updated to its latest version (3.0.8) + any other plugins you may have.

    Best regards,


    Thank you for this tip. We will continue to keep these themes up to date.
    These themes were updated and then the incident occurred. These things just happen is my take on this despite the best intentions of the plugin and theme developer. We all need to have some tolerance that nothing is full-proof and also be sure to have updates of everything just incase we loose our website. Thanks for your help.



    In this case I’m not sure the plugin to scan/check for issues or potential risks has enough weight to warrant any worry.

    Most scanning software will flag a few items within the theme even though they are being escaped correctly.

    Either way whenever anyone reports a worry/possible issue Kriesi re-checks through the theme and the specific concerns :)

    Best regards,



    Thank you ,

    best regards


Viewing 12 posts - 1 through 12 (of 12 total)

The topic ‘New Back Door Script Discovered’ is closed to new replies.