Scinorx Malware Guard

Scinorx Malware Guard helps WordPress site owners run a practical local scan after a suspected compromise or as part of regular website maintenance.

The plugin looks for common signs that deserve review:

• Modified or missing WordPress core files using official WordPress checksums when available.
• PHP-like executable files inside uploads.
• Suspicious PHP patterns often seen in injected code or unauthorized web shells.
• Exposed backup, database, archive, and environment files in the web root.
• Sensitive files that are writable by the current PHP process.

Scinorx Malware Guard is intentionally a detection and review tool. It does not automatically delete files, clean infections, or guarantee that a website is malware-free. If your website has been actively compromised, use this report alongside your host, backups, server logs, and professional remediation.

After a scan, admins may optionally send the diagnosis to Scinorx Technologies for review. This share action requires explicit consent and is never automatic. No account or paid service is required to use the local scan.

Privacy

Scan results are stored locally in your WordPress database and are not sent to Scinorx unless an administrator explicitly submits the optional diagnosis form. That form sends contact details, website URL, requested help type, urgency, environment metadata, severity counts, finding paths, recommendations, and the optional message entered by the administrator.

The core file integrity check may request official checksum data from WordPress.org when your WordPress installation supports it.

External Services

This plugin can contact external services in two specific cases:

• WordPress.org core checksum service: The core integrity check may request official WordPress core checksum data from WordPress.org to compare local core files against trusted hashes. This request can include the installed WordPress version and locale. Service endpoint: https://api.wordpress.org/core/checksums/1.0/
• Scinorx Technologies diagnosis review: After a scan, an administrator may optionally submit the “Send Diagnosis to Scinorx” form. This sends the administrator’s name, email address, website URL, requested help type, urgency, optional message, plugin version, WordPress version, PHP version, scan timestamp, scan score, severity counts, finding titles, finding paths, and recommendations to support@scinorx.com for review. This is never sent automatically.

Scinorx privacy policy: https://scinorx.com/privacy-policy/