WordPress Exploit Scanner

// December 14th, 2009 // wordpress

A while ago I started to work on the WordPress exploit scanner, which aims on finding possible exploits and unwanted code fragments in your WordPress installation. I initially rewrote a lot of code to merge in parts of a project I was previously working on as I thought it would be more useful to just have one project for this topic. I was happy that Donncha, who started this project agreed and added me as contributor to this project.

Today, I pushed out version 0.92 of this plugin which adds some minor speed improvements and a new pattern to detect a JavaScript virus discovered here.

I am currently still looking for new patterns for possible exploits and unwanted code and hope that we can also improve the speed and memory usage further.

If you have any suggestions for improving this plugin or find additional exploits and unwanted code in your WordPress install feel free to leave a note in the forums.

Leave a Reply