Skip to content Skip to sidebar

This is the technical support forum for WPML - the multilingual WordPress plugin.

Everyone can read, but only WPML clients can post here. WPML team is replying on the forum 6 days per week, 22 hours per day.

Sun Mon Tue Wed Thu Fri Sat
- 9:00 – 13:00 9:00 – 13:00 9:00 – 13:00 9:00 – 13:00 9:00 – 13:00 -
- 14:00 – 18:00 14:00 – 18:00 14:00 – 18:00 14:00 – 18:00 14:00 – 18:00 -

Supporter timezone: Europe/Madrid (GMT+02:00)

Tagged: 

This topic contains 4 replies, has 1 voice.

Last updated by Marcel 6 days, 9 hours ago.

Assisted by: Marcel.

Author Posts
November 20, 2025 at 4:03 am #17593818

kelvinZ

Background of the issue:
I am using WPML on my websites, and the plugin file Logic.php has been repeatedly flagged by Alibaba Cloud’s official security system for containing WebShell code. I have kept the plugin updated to the latest version. The issue has been reported by other users as well.

Symptoms:
The file Logic.php in the WPML plugin is flagged by Alibaba Cloud’s security system for containing WebShell code.

Questions:
Why is the Logic.php file in WPML being flagged by Alibaba Cloud’s security system?
What steps can I take to resolve the issue with the Logic.php file being flagged?

November 20, 2025 at 6:44 am #17593863

Dražen
Supporter

Languages: English (English )

Timezone: Europe/Zagreb (GMT+02:00)

Hello,

Thanks for contacting us.

While you wait for my colleague to take over the ticket, let me try to help you with the issue quickly.

Can you please share full report, so we can see path of the file and exact code that is reported? That way we can compare it with our fresh files and confirm if this is even part of WPML code or it needs further check.

Regards,
Drazen

November 24, 2025 at 6:53 am #17602999

kelvinZ

Hi,

What do you mean by “ full report”? I’m using the latest version of the plugin, so there shouldn’t be anything wrong with it.

/sitepress-multilingual-cms/vendor/wpml/fp/core/Logic.php

QQ20251124-145159.png
November 24, 2025 at 10:21 am #17603997

Marcel
Supporter

Languages: English (English ) Spanish (Español ) German (Deutsch )

Timezone: Europe/Madrid (GMT+02:00)

Hi,

We already made an effort in a previous release to address this, but it seems it wasn’t fully resolved.

I’ve forwarded it to our developers for further investigation, and I’ll keep you updated.

Best regards,
Marcel

November 25, 2025 at 1:41 pm #17608331

Marcel
Supporter

Languages: English (English ) Spanish (Español ) German (Deutsch )

Timezone: Europe/Madrid (GMT+02:00)

Hi,

our developers previously conducted a thorough review and concluded that the security alert from Alibaba is a false positive.

However, I kindly ask you to grant us access to your site so we can run a diff comparison and ensure that no files or parts of your site have been compromised.

Best regards,
Marcel