Some questions!

hello,

Despite all my precautions, my site sometimes is hacked. I use wordfence scans, and I have some questions about it:

– where is the database source of vulnerabilites used by Wordfence when scanning? Is this databse always updated? For instance, if a new threat arises, when the wordfence database will cintemplate this threat? (or wordfence uses an external live database?);

– Reagrding the first question, is wordfence able to scan my wordpress files (core, themes, plugins) to search for instance for the such vulnerability (that most plugins still have):
in your plugin or theme, you need to make sure that you are escaping these functions properly”

– I realize Wordfence can see if a file was chnaged. That is nice. However, the last time my site was hacked, a lot of files were
“If you use the add_query_arg() and/or remove_query_arg() functions deleted by the attackers. Im talking about wordpress standard files. Shouldnt Wordfence be able to see these kind of differences: core deleted files; or even added files not distribitued with the core files?

thank you!

https://wordpress.org/plugins/wordfence/