File and database scan

The scan compares WordPress files with the official versions, looks for malicious code and PHP in the uploads folder, then checks your content, options and administrators. It runs in the background without slowing the site, and an automatic scan runs every day.

Run a scan

Scanner tab, Start a scan button. Progress is shown step by step: files, comparison with official WordPress, database, administrators.

Results

Each result has a severity and an explanation. Filter by status: To review, Quarantined, Ignored, Resolved.

Actions

• Quarantine: the file is encrypted and stops running. The site is checked right after: if it stops responding, the file is put back.
• Restore the official file: for a modified core file. The previous version goes to quarantine.
• Preview the cleaning: for infected content, shows the before and after. WordPress keeps a revision.
• Ignore: for a false positive. You can review it again later.

Quarantine

Quarantined files can be restored or deleted for good from the Quarantined files list. Files WordPress cannot run without cannot be quarantined.