Hardening Dictionary
File integrity monitoring
Definition
File integrity monitoring checks whether important files changed compared with a known-good baseline.
Also called: file integrity, FIM, core file scanner
Why it matters for WordPress
Attackers often modify wp-config.php, drop PHP in uploads, or patch a core file. Integrity checks surface those edits even when malware signatures miss them.
How it shows up in practice
- Alerts that a core file differs from wordpress.org hashes
- New executable files outside expected plugin paths
- Changes right after a plugin install (sometimes benign; still worth a glance)
What to do
- Scan core regularly and after incidents.
- Investigate unexpected diffs before dismissing them.
- Reinstall core/themes from trusted packages when tampering is confirmed.
- Combine with malware scanning; integrity and signatures catch different things.
Feature: Core scanner.
Related terms
Nearby ideas in the dictionary
- Malware Malware on WordPress is unwanted code that steals data, spam-sends, redirects visitors, or keeps a backdoor open.
- Backdoor A backdoor is hidden access an attacker leaves so they can return without the original vulnerability.
- Webshell A webshell is a small script uploaded to the server that lets an attacker run commands through the browser.