Monitoring Dictionary
False positive
Definition
A false positive is an alert that looks like a problem but turns out to be benign after review.
Also called: false positives
Why it matters for WordPress
Scanners err on the side of caution. Treating every flag as malware wastes time; ignoring every flag because “scanners cry wolf” is how real infections linger.
How it shows up in practice
- A security plugin flags obfuscated but legitimate library code
- Integrity alert after a normal WordPress update
- Host antivirus quarantines a needed plugin file
What to do
- Verify before mass-deleting: path, modification time, whether the code belongs to a known plugin.
- Compare with a clean copy of the same plugin version.
- Allowlist narrowly when you are sure; do not blank-allow whole directories.
- Keep reporting patterns that are clearly wrong so rules improve.
Related terms
Nearby ideas in the dictionary
- Malware Malware on WordPress is unwanted code that steals data, spam-sends, redirects visitors, or keeps a backdoor open.
- Security audit A security audit is a structured review of a site’s risks, misconfigurations, and recommended fixes.
- File integrity monitoring File integrity monitoring checks whether important files changed compared with a known-good baseline.