wordfence stop to add plugin and scan report detect other issue

Hello,

I’m sorry to hear about the issue you are facing with Wordfence detecting problems with the file ‘class-serp-preview.php’ in the SEO by Rank Math plugin directory.

To address this concern, we recommend performing a conflict check to determine if it’s a bug or a conflict with another plugin. You can use the Health Check plugin to identify the root cause without affecting your website visitors.

Here are the steps to perform a conflict check using the Health Check plugin:

1. Log in to your WordPress Admin account and navigate to the dashboard.
2. Go to Plugins > Add New and search for ‘Health Check’.
3. Install and activate the Health Check & Troubleshooting plugin.
4. Navigate to Tools > Site Health and click on ‘Enable Troubleshooting Mode’.
5. Enable Rank Math SEO and other plugins one by one to identify the conflicting plugin.

Performing these steps will help you identify if the issue is caused by a conflict with another plugin. If the problem persists, please reach out to our support team for further assistance.

Thank you for bringing this to our attention, and we appreciate your cooperation in resolving this matter.

You can find more information on how to check for plugin conflicts here.

Best regards.

Sources:
Confirming a Theme/Plugin Conflict With Rank Math
Does Installing Rank Math Slow Down My Website? » Rank Math
How to Fix Duplicate Meta Tags » Rank Math
How to Fix ‘Automatic Update is Unavailable for this Plugin’ Error in Rank Math » Rank Math
Rank Math Sitemap Issues and Their Fixes » Rank Math

Hello,

Thank you for your patience.

The report you mention is false positive and is not related to any kind of security issue in the plugin. The security software simply looks for words in the code that may indicate security issues.

This results in many false positives because there are plenty of safe and legitimate uses of said words in the code.

We’ve checked the file in question, and I presume it’s the word base64 that triggers the error. This function is sometimes used to obfuscate malicious code, but of course, it has many legitimate uses, for example with its help we can embed image data inside the HTML code, which is what happens in Rank Math.

​​​​​​​You can learn more about the security of our plugin here: https://rankmath.com/kb/is-rank-math-safe-to-use/

Looking forward to helping you.