Don't Use cPanel to install Wordpress!

[djbaxter]

cPanel?s Site Software Addon Disables WordPress Auto Updates
by Jeff Chandler, WP Tavern
May 14, 2015

A little more than two months ago, Derek Munson, who goes by the username Drumology2001 published a thread in the WordPress.org support forums. While performing maintenance on several WordPress sites on his virtual private server, Munson discovered a number of them running outdated versions. Versions ranged from 3.9 to 4.1 with at least one site using WordPress 3.9.2.

...

After completing a number of troubleshooting techniques suggested by volunteers on the WordPress support forum, Munson installed Wordfence Security, a WordPress security plugin. One of Wordfence?s noteworthy features is its scanner. It compares clean WordPress core files to those on the server and notifies the user if it detects a difference. Results of the scan shows three files had been changed.

wp-admin/includes/update.php
wp-admin/update-core.php
wp-admin/includes/class-wp-upgrader.php

​

These files were only changed on WordPress sites that were installed using cPanel?s Site Software addon.

Read more...