Title: Scinorx Malware Guard
Author: Scinorx Technologies Inc
Published: <strong>June 19, 2026</strong>
Last modified: June 19, 2026

---

Search plugins

![](https://ps.w.org/scinorx-malware-guard/assets/banner-772x250.png?rev=3579273)

![](https://ps.w.org/scinorx-malware-guard/assets/icon-256x256.png?rev=3579273)

# Scinorx Malware Guard

 By [Scinorx Technologies Inc](https://profiles.wordpress.org/scinorxtechnologies/)

[Download](https://downloads.wordpress.org/plugin/scinorx-malware-guard.1.0.0.zip)

 * [Details](https://wordpress.org/plugins/scinorx-malware-guard/#description)
 * [Reviews](https://wordpress.org/plugins/scinorx-malware-guard/#reviews)
 *  [Installation](https://wordpress.org/plugins/scinorx-malware-guard/#installation)
 * [Development](https://wordpress.org/plugins/scinorx-malware-guard/#developers)

 [Support](https://wordpress.org/support/plugin/scinorx-malware-guard/)

## Description

Scinorx Malware Guard helps WordPress site owners run a practical local scan after
a suspected compromise or as part of regular website maintenance.

The plugin looks for common signs that deserve review:

 * Modified or missing WordPress core files using official WordPress checksums when
   available.
 * PHP-like executable files inside uploads.
 * Suspicious PHP patterns often seen in injected code or unauthorized web shells.
 * Exposed backup, database, archive, and environment files in the web root.
 * Sensitive files that are writable by the current PHP process.

Scinorx Malware Guard is intentionally a detection and review tool. It does not 
automatically delete files, clean infections, or guarantee that a website is malware-
free. If your website has been actively compromised, use this report alongside your
host, backups, server logs, and professional remediation.

After a scan, admins may optionally send the diagnosis to Scinorx Technologies for
review. This share action requires explicit consent and is never automatic. No account
or paid service is required to use the local scan.

#### Privacy

Scan results are stored locally in your WordPress database and are not sent to Scinorx
unless an administrator explicitly submits the optional diagnosis form. That form
sends contact details, website URL, requested help type, urgency, environment metadata,
severity counts, finding paths, recommendations, and the optional message entered
by the administrator.

The core file integrity check may request official checksum data from WordPress.
org when your WordPress installation supports it.

#### External Services

This plugin can contact external services in two specific cases:

 * WordPress.org core checksum service: The core integrity check may request official
   WordPress core checksum data from WordPress.org to compare local core files against
   trusted hashes. This request can include the installed WordPress version and 
   locale. Service endpoint: `https://api.wordpress.org/core/checksums/1.0/`
 * Scinorx Technologies diagnosis review: After a scan, an administrator may optionally
   submit the “Send Diagnosis to Scinorx” form. This sends the administrator’s name,
   email address, website URL, requested help type, urgency, optional message, plugin
   version, WordPress version, PHP version, scan timestamp, scan score, severity
   counts, finding titles, finding paths, and recommendations to `support@scinorx.
   com` for review. This is never sent automatically.

Scinorx privacy policy: https://scinorx.com/privacy-policy/

## Installation

 1. Upload the plugin files to the `/wp-content/plugins/scinorx-malware-guard` directory,
    or install the plugin through the WordPress Plugins screen.
 2. Activate the plugin through the Plugins screen in WordPress.
 3. Open Malware Guard in the WordPress admin menu.
 4. Run a local scan and review the findings.

## FAQ

### Does this plugin remove malware?

No. Scinorx Malware Guard identifies indicators that need review. It does not automatically
remove or quarantine files. This avoids accidental deletion of legitimate custom
code.

### Does a clean scan mean my site is definitely safe?

No. No WordPress plugin can guarantee that a site is clean. The scan checks common
file-level indicators and should be used together with server logs, backups, hosting
tools, and professional review when compromise is suspected.

### Are scan results sent to Scinorx?

Not automatically. Reports are stored locally in WordPress. An administrator can
choose to send a diagnosis to Scinorx by submitting the optional share form and 
agreeing to the consent checkbox.

### Why does the plugin check WordPress core checksums?

Modified core files can be a compromise indicator. When checksum data is available,
the plugin compares local WordPress core files with official WordPress.org hashes
for the installed version and locale.

### Why does the scan mention default WordPress themes I removed?

Official WordPress checksum data can include bundled default themes and sample plugins,
but many production sites intentionally remove unused packages. Scinorx Malware 
Guard ignores missing bundled default theme and sample plugin files so normal cleanup
does not create noisy findings. Missing files that are commonly removed for hardening,
such as `xmlrpc.php`, public readme files, or license files, may be grouped into
a single informational note.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Scinorx Malware Guard” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ Scinorx Technologies Inc ](https://profiles.wordpress.org/scinorxtechnologies/)

[Translate “Scinorx Malware Guard” into your language.](https://translate.wordpress.org/projects/wp-plugins/scinorx-malware-guard)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/scinorx-malware-guard/),
check out the [SVN repository](https://plugins.svn.wordpress.org/scinorx-malware-guard/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/scinorx-malware-guard/)
by [RSS](https://plugins.trac.wordpress.org/log/scinorx-malware-guard/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.0

 * Initial release.

## Meta

 *  Version **1.0.0**
 *  Last updated **1 day ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.0**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [file scan](https://wordpress.org/plugins/tags/file-scan/)[integrity](https://wordpress.org/plugins/tags/integrity/)
   [malware scanner](https://wordpress.org/plugins/tags/malware-scanner/)[security](https://wordpress.org/plugins/tags/security/)
   [wordpress security](https://wordpress.org/plugins/tags/wordpress-security/)
 *  [Advanced View](https://wordpress.org/plugins/scinorx-malware-guard/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/scinorx-malware-guard/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/scinorx-malware-guard/reviews/)

## Contributors

 *   [ Scinorx Technologies Inc ](https://profiles.wordpress.org/scinorxtechnologies/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/scinorx-malware-guard/)