Attacks Dictionary
Malware
Definition
Malware on WordPress is unwanted code that steals data, spam-sends, redirects visitors, or keeps a backdoor open.
Also called: malicious software
Why it matters for WordPress
Infected sites lose trust, get blacklisted, and can infect visitors. Cleanup that only deletes one file often fails because a backdoor puts it back.
How it shows up in practice
- Google Safe Browsing or host notices
- Unexpected redirects, spam SEO pages, or crypto miners
- Modified core/theme files or mystery PHP in uploads
- New admin users or cron jobs you did not create
What to do
- Put the site in maintenance mode and take a backup for forensics.
- Scan files and compare core against known-good hashes.
- Remove malware and the access path (weak passwords, vulnerable plugins, backdoors).
- Rotate all passwords, salts, and API keys.
- Re-scan after cleanup and watch logs for reinfection.
Feature: Malware scanner. Guide: WordPress malware removal.
Go deeper
Want the full walkthrough?
This page stays short on purpose. The guide covers steps, examples, and what to check on a live WordPress site.
Open full guideRelated terms
Nearby ideas in the dictionary
- Backdoor A backdoor is hidden access an attacker leaves so they can return without the original vulnerability.
- Webshell A webshell is a small script uploaded to the server that lets an attacker run commands through the browser.
- File integrity monitoring File integrity monitoring checks whether important files changed compared with a known-good baseline.