Suspicious function found in WP Stateless Plugin

File scanning issues need attention. I have activated the pugin
https://wordpress.org/plugins/wp-stateless/
and run the scan I see 8 files reported most of theme are error logs and one of them is php file from the plugin.
Here is the file:
wp-content/plugins/wp-stateless/vendor/usabilitydynamics/lib-utility/lib/class-utility.php
Suspicious function found.

  • Ash

    Hello Nguyen Van Hao

    If the error log file is sitting within the wordpress core, then defender will mark that as suspicious file. It compares with the wordpress core and any extra file is considered suspicious.

    And the file is marked, you might see there is a eval function in that file. Eval functions are dangerous and should not be used in a plugin. Some hosts even do not allow to run the eval function. Sometimes, there are encrypted code passed within the eval function. That's why it is marked as suspicious.

    If you are sure about the file is good, feel free to ignore in the file scanning section :slight_smile:

    Have a nice day!

    Cheers,
    Ash

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.