Replies: 0
99% certain the 281 Wordfence results (example below) resulted from downgrading from WP5.2 to WP4.9.10.
I guess WP Downgrade does not remove files that were added during the upgrade?
EXAMPLE MESSAGE from WORDFENCE
Unknown file in WordPress core: wp-includes/sodium_compat/LICENSE
Type: File
High
Filename: wp-includes/sodium_compat/LICENSE
File Type: Core
Details: This file is in a WordPress core location but is not distributed with this version of WordPress. This is usually due to it being left over from a previous WordPress update, but it may also have been added by another plugin or a malicious file added by an attacker.