WPIntell

Source evidence

SUCURI warning

MyRewards · support · 2023-11-27T11:47:00+00:00

MyRewards plugin evidence original source source API
mixedsentiment
lowseverity
0.62relevance
2replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

4 / 26 rows with source links

15.4% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

22 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
Nathan resolved
Hi, SUCURI is warning me about a backdoor in this file: wp-content/plugins/woorewards/include/pointsflow/action.php Definition: php.backdoor.file_get_contents.005 Looking at the file there is a line which says: $json = @json_decode(@file_get_contents($_FILES[$key][‘tmp_name’]), true); Not sure if this is the culprit. Can I place the whole file code in here so you can see if the file is correct? Hi, This is a false positive. We have to read a file when you want to import points. Be sure that we carry out all the necessary checks and that no malicious code can be executed through this. Best regards Okay, that’s good to hear. Thanks!

Comments

2 shown
Long Watch Studio – Code Faeries 2023-11-27T13:32:00+00:00

Hi, This is a false positive. We have to read a file when you want to import points. Be sure that we carry out all the necessary checks and that no malicious code can be executed through this. Best regards

Nathan 2023-11-27T13:33:00+00:00

Okay, that’s good to hear. Thanks!