Scanner says core files were modified? Open the diff. After wp2shell, that is often leftover access.

How to read it

Security tests

Enable AI Security Advisor

Connect OpenAI, Gemini, or Anthropic via WordPress Connectors and use Security Ninja’s AI Security Advisor.

Requires WordPress 7.0 or newer (Connectors / AI client support).

  1. Go to Settings → Connectors.
  2. Add credentials for at least one provider (OpenAI, Gemini, and Anthropic are available by default).

New Connectors page in WP7

Configure AI LLM provider credentials

  1. Open Security Ninja → Security Advisor.
  2. If more than one provider is configured, choose which LLM to use for reports and questions at the bottom of the Security Advisor page.

Configure LLM Provider

More: What happens when you generate a report, Security report.

Still stuck? Get help or contact us.

Larger screenshot

Enlarged image