Wordfence Alert: Tinymce plugin

Wordfence Alert: Tinymce plugin

I have received the following alerts from my Wordfence Security Plug-in. However, I don find tinymce plugin on my site, unless it is a component of X-plugins, such as Typekit.

Your advice regarding these alerts would be appreciated.

———————

Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpembed/plugin.min.js

Filename:
wp-includes/js/tinymce/plugins/wpembed/plugin.min.js
File Type:
Core
Issue First Detected:
14 days 8 hours ago.
Severity:
Warning
Status
New

This file is in a WordPress core location but is not distributed with this version of WordPress. This is usually due to it being left over from a previous WordPress update, but it may also have been added by another plugin or a malicious file added by an attacker.

Wordfence: File Viewer
Filename:
/hsphere/local/home/c252133/rayscountryham.com/wp-includes/js/tinymce/plugins/wpembed/plugin.min.js
File Size:
280 bytes
File last modified:
Monday 26th of October 2015 12:50:26 PM
!function(a){“use strict”;a.PluginManager.add(“wpembed”,function(a,b){a.on(“init”,function(){var c=a.dom.uniqueId(),d=a.dom.create(“script”,{id:c,type:“text/javascript”,src:b+"/…/…/…/wp-embed.js"});a.getDoc().getElementsByTagName(“head”)[0].appendChild(d)})})}(window.tinymce);

Wordfence: File Viewer
Filename:
/hsphere/local/home/c252133/rayscountryham.com/wp-includes/js/tinymce/plugins/wpembed/plugin.js
File Size:
444 bytes
File last modified:
Monday 26th of October 2015 12:50:26 PM
(function ( tinymce ) {
‘use strict’;

tinymce.PluginManager.add( 'wpembed', function ( editor, url ) {
    editor.on( 'init', function () {
        var scriptId = editor.dom.uniqueId();

        var scriptElm = editor.dom.create( 'script', {
            id: scriptId,
            type: 'text/javascript',
            src: url + '/../../../wp-embed.js'
        } );

        editor.getDoc().getElementsByTagName( 'head' )[ 0 ].appendChild( scriptElm );
    } );
} );

})( window.tinymce );

Hi There,

For more understanding regarding the issue, please check this thread: https://wordpress.org/support/topic/wpembed-unknown-file-in-core/. Plugin developer provides a detailed explanation.

Hope this helps.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.