WP Manifestindependent plugin directory
manifest / security / wp-security

Obfuscated Malware Scanner

by Your Name · github.com/jessifoo/wp-security

★ 1stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/jessifoo/wp-security/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/jessifoo/wp-security ↗

Description

A real-time WordPress security plugin designed for small sites that need immediate malware prevention and cleanup, with special handling for Elementor and Astra themes. The plugin:

  • Preserves custom theme content during cleanup
  • Prevents malicious file uploads
  • Monitors and blocks unauthorized file changes
  • Immediately removes malicious files
  • Repairs WordPress core files without backups
  • Cleans database content automatically
  • Works independently of WordPress's update system

Key Features

  • Real-time file upload scanning
  • Theme content preservation
  • File change monitoring using checksums
  • Immediate removal of suspicious files
  • Direct core file replacement
  • Hourly cleanup process
  • Database content scanning

Theme Protection

  • Preserves Elementor page builder data
  • Maintains Astra theme settings
  • Saves custom theme modifications
  • Supports theme content export/import
  • Restores theme content after cleanup

Prevention Features

  • Blocks dangerous file types
  • Prevents upload of malicious files
  • Monitors file system changes
  • Maintains file permissions
  • Verifies file integrity

Cleanup Features

  • Removes malicious files while preserving theme content
  • Removes files with malicious content
  • Cleans database of malicious content
  • Repairs modified core files
  • Fixes incorrect permissions

Theme Content Backup

You can export your theme content to JSON format for backup:

  • Elementor page builder data
  • Astra theme settings
  • Custom theme modifications
  • Theme customizer settings

This content can be stored in a GitHub repository and restored when needed.

Security Checks

The plugin scans for:

  • Base64 encoded content
  • Eval() and system() calls
  • Shell commands
  • Remote code execution
  • Malicious database content
  • Suspicious file types
  • Unauthorized file changes

Installation

  1. Upload the plugin files to the /wp-content/plugins/ directory
  2. Activate the plugin through the 'Plugins' menu in WordPress
  3. The plugin will automatically start protecting your site

Logs

All security actions are logged to wp-content/malware-scanner.log

Author

Your Name