1 files changed, 10 insertions, 1 deletions

diff --git a/php-malware-finder/whitelists/wordpress.yar b/php-malware-finder/whitelists/wordpress.yar
index 43ae47c..bf3d9f5 100644
--- a/php-malware-finder/whitelists/wordpress.yar
+++ b/php-malware-finder/whitelists/wordpress.yar
@@ -438,7 +438,12 @@ private rule Wordpress : Blog
         hash.sha1(0, filesize) == "90168c265f327bbf1fa0a03277559252535193b5" or // wp-admin/includes/upgrade.php
         hash.sha1(0, filesize) == "bd4825cdd9770c2a56285f1a943405aac5d3f8b7" or // wp-includes/formatting.php
 
+        /* wordpress-4.5.4 */
+        hash.sha1(0, filesize) == "ccd23ef96a588840943fba081bfa6f88531c4abc" or // wordpress/wp-admin/includes/class-pclzip.php
+        hash.sha1(0, filesize) == "78f2e24abfdd3a9aa7860cd5a3ecf3a0c3e72599"    // wordpress/wp-includes/widgets/class-wp-widget-categories.php
+
         /* Wordpress 4.6 */
+        hash.sha1(0, filesize) == "8a187078730ca4fc59c62ee7733b03bd6f820066" or // wp-includes/widgets/class-wp-widget-categories.php
         hash.sha1(0, filesize) == "01b00537f8ea6c0e7d567ce0cb85adafc0766293" or // wp-includes/post.php
         hash.sha1(0, filesize) == "73971e6d086c60ee8706fe3672427baf36cbfc47" or // wp-includes/media.php
         hash.sha1(0, filesize) == "40ecd46843d363a5b972b7fb58f5c7501f828bd3" or // wp-admin/includes/ajax-actions.php
@@ -453,6 +458,10 @@ private rule Wordpress : Blog
         hash.sha1(0, filesize) == "4d14f4a0e6dee443781f8a4d0dcc179f05cb7508" or // wp-includes/formatting.php
         hash.sha1(0, filesize) == "dfe0e8b745d516ee953c36a91f5e381868d1d9ee" or // wp-includes/load.php
         hash.sha1(0, filesize) == "42f94321c15d9d03ef6b108beebabf20a5e36f9e" or // wp-admin/includes/schema.php
-        hash.sha1(0, filesize) == "ed16b47ec6fbe3786d62fa0648a87ab225a5b498"    // wp-admin/includes/class-pclzip.php
+        hash.sha1(0, filesize) == "ed16b47ec6fbe3786d62fa0648a87ab225a5b498" or // wp-admin/includes/class-pclzip.php
+
+        /* Wordpress 4.6.1 */
+        hash.sha1(0, filesize) == "8f20d9558a6f5dfd5366acfc0f2b8ac454d50365" or // wp-includes/load.php
+        hash.sha1(0, filesize) == "841e5834cef1bafb9ff11ac6b122567fe7be58be"    // wp-includes/functions.php
 
 }