Scanner says the core hashes file is missing
Scanner reports a core hashes file missing for the installed WordPress version, so scans flag every core file or stop.
13 public reports · first reported 14 December 2014 · last reported 5 July 2019
What's going wrong
Owners of the Exploit Scanner plugin often see a warning that a core hashes file for their WordPress version is missing. The scanner then says modified core files will no longer be detected and lists hundreds of suspicious items. The plugin ships hash files only up to older WordPress releases, so anyone on a newer version has to search GitHub, rebuild a file by hand, and upload it over FTP. Site owners on managed hosts often cannot find where the file belongs, and multisite users are confused about the location. Many give up before scanning. A managed service that keeps verified core hashes ready for each WordPress release would remove the hunt and let owners scan immediately.
AI-assisted: written with the help of AI from the reports.
Products affected
Exploit Scanner.
Related problems
Who has this problem
2 businesses found.
Unlock them at the top of this page — $38.
All sales are final — no refunds.
Each business's name, the address it published, and the page it was published on. Paid through Stripe; you get a private page to bookmark, with a CSV download.