Scanner says core files were modified? Open the diff. After wp2shell, that is often leftover access.

Affiliates

Join the WP Security Ninja affiliate program, find approved marketing assets, and earn commissions recommending WordPress security.

How to sign up as an affiliate and where to find marketing material.