Check Plugin for Malware?

MadsDK · Feb 7, 2023

Hi.

Today I bought a WordPress plugin from someone, and in fear of installing it and getting my site infected by malware, I'm currently looking for something that can check the file for malware. Does it exist? The only thing I can find are solutions that can check a website for malware, but not a plugin before installing it.

ContentExpert · Feb 7, 2023

MadsDK said:
I'm currently looking for something that can check the file for malware.

Use VirusTotal, upload the file here and you will be good to go.

xReminisce · Feb 7, 2023

ContentExpert said:
Use VirusTotal, upload the file here and you will be good to go.

lmfao, @Gogol i believe you need to educate everyone on why VT is trash again

ContentExpert · Feb 7, 2023

xReminisce said:
VT is trash

This forum trusts VirusTotal as members must provide a VT link to share a download here, it should work just fine for what the OP is needing to achieve.

MadsDK · Feb 7, 2023

ContentExpert said:
Use VirusTotal, upload the file here and you will be good to go.

ContentExpert said:
This forum trusts VirusTotal as members must provide a VT link to share a download here, it should work just fine for what the OP is needing to achieve.

Thank you!

xReminisce · Feb 7, 2023

ContentExpert said:
This forum trusts VirusTotal as members must provide a VT link to share a download here, it should work just fine for what the OP is needing to achieve.

That's uploading it to the forum
he said and I quote

MadsDK said:
I'm currently looking for something that can check the file for malware

a very different story here.

OP never mentioned anything about posting it on BHW

but we can agree to disagree.

ContentExpert · Feb 7, 2023

xReminisce said:
OP never mentioned anything about posting it on BHW

I am fully aware of that, I only said VT was trusted by the forum to give credibility to the solution I gave for his objective, which is to simply scan a file to confirm malware is not present.

xReminisce said:
but we can agree to disagree.

There is nothing to agree or disagree about, he asked for a way to scan a file, and I gave him a way to do so. If you do not like the solution I gave him, you could have shared an alternative you felt was better for the task.

Lukmat · Feb 7, 2023

MadsDK said:
Hi.

Today I bought a WordPress plugin from someone, and in fear of installing it and getting my site infected by malware, I'm currently looking for something that can check the file for malware. Does it exist? The only thing I can find are solutions that can check a website for malware, but not a plugin before installing it.

Just already guys resign from using Wordpress. Go with static sites generators like Gatsby

SirLouen · Feb 7, 2023

There is no 100% trustworthy method to detect such, although you could simply install a sandbox in your PC with WP (for example, with LocalWP or Laragon) and then install Wordfence and the plugin you just bought and run a scan with Wordfence (also Sucuri and iThemes Security if you want to pass extra analysis).

They may detect something

MadsDK · Feb 8, 2023

SirLouen said:
There is no 100% trustworthy method to detect such, although you could simply install a sandbox in your PC with WP (for example, with LocalWP or Laragon) and then install Wordfence and the plugin you just bought and run a scan with Wordfence (also Sucuri and iThemes Security if you want to pass extra analysis).

They may detect something

Thank you! I used LocalWP and it worked perfectly. Luckily there was nothing

SirLouen · Feb 8, 2023

MadsDK said:
Thank you! I used LocalWP and it worked perfectly. Luckily there was nothing

Still be aware, that this tools just check the classic (generally the malicious coders have some "common" practices, like obfuscating code with hashes), which a common developer never does because it's too tedious. But if the coder simply pushed the code more naturally, there will never be a tool to detect such (unless maybe in the future a trained AI can detect such patterns?)

JasonS · Feb 8, 2023

Install wp on your local machine and plugin. Then run Acunetix web vulnerability scanner (paid) or OWASP ZAP (free) to find if there is any hidden vulnerability in the plugin added by the bad guys.

gplthemesplugins · Aug 18, 2023

There is no 100% Trustworthy plugins, Still i will recommend you some best Security Plugins:

Wordfence
iTheme Security
Malcare
Sucuri Security
SecuPress

Still, Be Aware And Just Make Sure To Use Up To Date Plugins.

Digi Monster · Aug 18, 2023

I use wordfence. My website is secure till date.

Solomels · Aug 20, 2023

Digi Monster said:
I use wordfence. My website is secure till date.

Yes, I know Wordfence is a great plugin.

archicentltd · Jan 1, 2024

Yes, it is important to check plugins for malware before installing them.

flackz · Jan 1, 2024

MadsDK said:
Check Plugin for Malware?

The short answer is that it's simply not possible if the code injection is done right.

warcraft14115 · Jan 6, 2024

ContentExpert said:
Use VirusTotal, upload the file here and you will be good to go.

Nah, it's not easy like that.
VT cannot scan everything. Choose a safe download source, the best way is to compare folders between different sources. This requires you to know how to read code and is quite time consuming. I only do that with unreliable sources

Md Sahid Mia · Jan 7, 2024

Buy plugins only from official website. Don't get from 3rd party. Otherwise your site might be hacked.

Check Plugin for Malware?

Regular Member

Elite Member

Elite Member

Elite Member

Regular Member

Elite Member

Elite Member

Elite Member

Elite Member

Regular Member

Elite Member

Elite Member

Junior Member

Banned - Selling via PM

BANNED

BANNED

Senior Member

Junior Member

Elite Member

Main Menu

Marketplace

Making Money

BlackHat World