removing dup entry and adding wp 4.2.4 whitelists

1 files changed, 11 insertions, 1 deletions

diff --git a/php-malware-finder/whitelists/wordpress.yar b/php-malware-finder/whitelists/wordpress.yar
index b8d53d9..79655f1 100644
--- a/php-malware-finder/whitelists/wordpress.yar
+++ b/php-malware-finder/whitelists/wordpress.yar
@@ -278,7 +278,6 @@ private rule Wordpress : Blog
         /* Wordpress 3.9 */
         hash.sha1(0, filesize) == "674103e9be90964eeb0976d1eb8a389536bd4a0e" or // wp-includes/images/spinner-2x.gif
         hash.sha1(0, filesize) == "66e190e129136b9cc01fab3277c3675ca414a3d2" or // wp-content/plugins/akismet/class.akismet-admin.php
-        hash.sha1(0, filesize) == "674103e9be90964eeb0976d1eb8a389536bd4a0e" or // wp-admin/images/spinner-2x.gif
         hash.sha1(0, filesize) == "eb97a3e94bd576d7e18b86eda34dd5fb52ca581a" or // wp-includes/class-IXR.php
         hash.sha1(0, filesize) == "999034fc7d1aee5c45b63511e91ec57ce29709e3" or // wp-admin/includes/template.php
         hash.sha1(0, filesize) == "e4e7a298eaa8383c7d3ae8e084600bc73c5a5d79" or // wp-includes/class-wp-customize-control.php
@@ -343,6 +342,17 @@ private rule Wordpress : Blog
         hash.sha1(0, filesize) == "8ddb9eff06105b9699c6b03db54472291abcb823" or // wp-includes/taxonomy.php
         hash.sha1(0, filesize) == "9dd666651f57ef6e704310fe37ffce7dfd2322e4" or // wp-includes/comment.php
 
+        /* Wordpress 4.2.4 */
+        hash.sha1(0, filesize) == "20176473436fa9be554659f5f921a2b08fc66c9e" or // wordpress/wp-admin/includes/upgrade.php
+        hash.sha1(0, filesize) == "4be1c9f6825b163668c5c9084032f058379e9d25" or // wordpress/wp-admin/includes/ajax-actions.php
+        hash.sha1(0, filesize) == "aae4e9c2ad0bfa7cebe4e19fdddba3119197dc6f" or // wordpress/wp-includes/post.php
+        hash.sha1(0, filesize) == "85f1d5a71013a3e75b88ab1a6679c02df01179b5" or // wordpress/wp-includes/default-widgets.php
+        hash.sha1(0, filesize) == "ddc3c60de72339299e91aba2ccd4f31d931f8be5" or // wordpress/wp-includes/deprecated.php
+        hash.sha1(0, filesize) == "4bdf423a6e85a54f72f12f75ffbf4cd1db13a0eb" or // wordpress/wp-includes/query.php
+        hash.sha1(0, filesize) == "005f02927a6904c4e7f3b88ebdd9feaa6221790b" or // wordpress/wp-includes/class-phpmailer.php
+        hash.sha1(0, filesize) == "659c78aafc334c6076c1543202bca090a1eedf2b" or // wordpress/wp-includes/media.php
+        hash.sha1(0, filesize) == "71f2de7b22628efdb6074ad44aa33dc10de1c473" or // wordpress/wp-includes/formatting.php
+
         /* Wordpress 4.3 */
         hash.sha1(0, filesize) == "2d97f1953b9cc70c72a53515d5339ad46875bba8" or // wp-content/plugins/akismet/class.akismet-admin.php
         hash.sha1(0, filesize) == "f563d6766a7ef4812132ccb6964faff2f565c4b4" or // wp-includes/js/tinymce/tinymce.min.js