From 5c7d7cb17e5bce1fc1d6828ef7eae9cade84a9e6 Mon Sep 17 00:00:00 2001 From: Julien "shaddai" Reveret Date: Mon, 31 Oct 2016 10:28:00 +0100 Subject: wordpress 4.5.4 and 4.6 wl added --- php-malware-finder/whitelists/wordpress.yar | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/php-malware-finder/whitelists/wordpress.yar b/php-malware-finder/whitelists/wordpress.yar index 43ae47c..bf3d9f5 100644 --- a/php-malware-finder/whitelists/wordpress.yar +++ b/php-malware-finder/whitelists/wordpress.yar @@ -438,7 +438,12 @@ private rule Wordpress : Blog hash.sha1(0, filesize) == "90168c265f327bbf1fa0a03277559252535193b5" or // wp-admin/includes/upgrade.php hash.sha1(0, filesize) == "bd4825cdd9770c2a56285f1a943405aac5d3f8b7" or // wp-includes/formatting.php + /* wordpress-4.5.4 */ + hash.sha1(0, filesize) == "ccd23ef96a588840943fba081bfa6f88531c4abc" or // wordpress/wp-admin/includes/class-pclzip.php + hash.sha1(0, filesize) == "78f2e24abfdd3a9aa7860cd5a3ecf3a0c3e72599" // wordpress/wp-includes/widgets/class-wp-widget-categories.php + /* Wordpress 4.6 */ + hash.sha1(0, filesize) == "8a187078730ca4fc59c62ee7733b03bd6f820066" or // wp-includes/widgets/class-wp-widget-categories.php hash.sha1(0, filesize) == "01b00537f8ea6c0e7d567ce0cb85adafc0766293" or // wp-includes/post.php hash.sha1(0, filesize) == "73971e6d086c60ee8706fe3672427baf36cbfc47" or // wp-includes/media.php hash.sha1(0, filesize) == "40ecd46843d363a5b972b7fb58f5c7501f828bd3" or // wp-admin/includes/ajax-actions.php @@ -453,6 +458,10 @@ private rule Wordpress : Blog hash.sha1(0, filesize) == "4d14f4a0e6dee443781f8a4d0dcc179f05cb7508" or // wp-includes/formatting.php hash.sha1(0, filesize) == "dfe0e8b745d516ee953c36a91f5e381868d1d9ee" or // wp-includes/load.php hash.sha1(0, filesize) == "42f94321c15d9d03ef6b108beebabf20a5e36f9e" or // wp-admin/includes/schema.php - hash.sha1(0, filesize) == "ed16b47ec6fbe3786d62fa0648a87ab225a5b498" // wp-admin/includes/class-pclzip.php + hash.sha1(0, filesize) == "ed16b47ec6fbe3786d62fa0648a87ab225a5b498" or // wp-admin/includes/class-pclzip.php + + /* Wordpress 4.6.1 */ + hash.sha1(0, filesize) == "8f20d9558a6f5dfd5366acfc0f2b8ac454d50365" or // wp-includes/load.php + hash.sha1(0, filesize) == "841e5834cef1bafb9ff11ac6b122567fe7be58be" // wp-includes/functions.php } -- cgit v1.3