Disguised malware file (double extension)

What it is

A file was found with two extensions, like image.jpg.php — a classic way to disguise malicious code as a harmless picture or document, since some servers still execute the hidden second extension.

How to fix it

Delete the file if you don't recognize it, and change your passwords if you're unsure how it got there. If you're not sure how, install the WordPress Plugin: its Security tab applies fixes like this one automatically.