Wordpress Install Truncating Filenames

Splunge

Hi all,

Tried installing some WordPress sites and all looked to be ok. CPFence emailed me this morning to warn of possible malware. It isn't malware as these are fresh installs, not touched, and proven by deleting installs and reinstalling. I've downloaded WP7 from Wordpress' main site and the files are full filenames. Softaculous installs WP7 to my old servers (what i'm moving away from) fine with no errors either.

It doesn't matter either if you install WP to public_html/ or a sub folder.

Doesn't seem to be causing any immediate issues, but can't say if it may in future? Would one of the team be able to have a look and see if it's something Enhance is causing, or maybe something as simple as a corrupt file from the source repos.

Attached is a pic of 1 of the folders in Enhance showing the file, and also the src from WP site. The log file (for reference so you're not hunting all the truncated filenames) below.

![https://i.ibb.co/JjG8zDSV/Screenshot-2026-07-08-090239.png](https://)
![https://i.ibb.co/DHMvcQ9N/Screenshot-2026-07-08-090527.png](https://)

`==== START: Issues Detected for Site (/var/www/xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html, Owner: xxxxxxxx) ====

Auto-quarantine is disabled. Please review and delete files below if found to be infected. Run 'cpfence --enable-auto-file-action' to enable Auto-quarantine.
Suspicious file detected!
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/SpeechGeneration/Contracts/SpeechGeneration
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/VideoGeneration/Contracts/VideoGenerationOp
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/VideoGeneration/Contracts/VideoGenerationMo
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/TextGenerationMode
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/TextGenerationOper
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/ImageGeneration/Contracts/ImageGenerationOp
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/ImageGeneration/Contracts/ImageGenerationMo
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/TextToSpeechConversion/Contracts/TextToSpee
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/OpenAiCompatibleImplementation/AbstractOpenAiCompa
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Http/Contracts/WithRequestAuthenticationInterface.
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/AbstractApiBasedModelMetada
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/ListModelsApiBasedProviderA
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/Contracts/ApiBasedModelInte
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/GenerateTextApiBasedProvide
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Contracts/ProviderWithOperationsHandlerInterface.p
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Strategy/CommonPsr17ClassesStrategy.p
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/NoCandidateFoundException.p
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/DiscoveryFailedException.ph
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/ClassInstantiationFailedExc
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/StrategyUnavailableExceptio
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/PuliUnavailableException.ph

==== END: Issues Detected for Site (/var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html, Owner: xxxxxxxx) ====`

Cheers 😊

cPFence

Splunge

Yes, this is a known issue in WordPress 7 and it has already been reported to get fixed by wp team.

It is related to WordPress 7.0's new bundled AI Client located under:

wp-includes/php-ai-client/

Those files are legitimate WordPress core files. On some fresh installations, the filenames can become truncated during extraction because of a known WP-CLI / PharData long-path issue affecting wp core download.

This is why both cPFence and Wordfence may flag them as unknown files even though they are part of the WordPress core.

Splunge

Forgot to add, this is only when I install WP from the "App" installer on the panel.

Adam

Thank you for reporting this. We were able to reproduce it. Enhance installs WordPress with wp-cli and it looks like there is a bug.

https://github.com/wp-cli/core-command/issues/336

The fix should be in the next wp-cli release. As per the above link, if you update to the nightly wp-cli this also fixes the problem immediately - with the obvious risk that something else might be broken. If you update wp-cli you need to restart the website container for the affected website before attempting to reinstall Wordpress.

Splunge

Adam Thanks for the quick reply, really appreciated. 😊👍