How to check wp plugins if they have malicious codes?

EternalFun

Supreme Member
Joined
Sep 4, 2018
Messages
1,212
Reaction score
248
I know TAC checks the themes if they have malicious but how do I check the plugins?
 
buy them from legit companys .

trust is the key with suplier bent or stright .

usally a javascript / php curl code / database code, hidden on a page to hack your content or info.

forum like this got top programmers will get soon reported or spotted .

i can honestly say themes and plugins on here are fantastic as the big boys cheek them.(( leave comments on condition ))
 
@Festinger and gpldl.com are two choices I always trust.

Checking plugins by yourself is possible but not bulletproof. I had a theme that would display links to some spam webpages. I could not find where the links were stored, tried searching for the url and could not find it at all. It was masked using base64. Search though the php files for "base64_encode". If there are any results, stay away from the theme. This is only 1 way of checking the code, there are millions of other ways of abusing plugins/themes.
 
I lean on the side of just buying the theme or plugin. If you don't know how to go through the code, and you don't know what to look for, you'll always be in doubt.
 
Try scanning them with Wordfence installed on a local copy of WordPress.
 
I am also curious if there is any malware/virus softwares spacialized in offline wordpress files scanning. Would be much easier to FTP the whole root map and scan & repair everything locally if possible.
 
Back
Top