Support » Plugin: WP Performance Score Booster » It’s maleware and now I can’t remove it

It’s maleware and now I can’t remove it

  • nihonscope

    (@nihonscope)


    1 month ago

    I highly recommend staying away from this plugin, I can not delete it in dashboard, and when I do in the FTP, it deletes my entire plugin folder and I can no longer access my plugins as it just forwards to the homepage.

    But then even after accepting that I couldn’t access my plugin page, it reinstalled itself meaning there is a rootkit in my site now.

    Big red flag!

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Dipak C. Gajjar

    (@dipakcg)

    1 month ago

    This is a false review and would like a moderator to look into this.

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    1 month ago

    A plugin cannot be a “rootkit”. That’s not how this sort of thing works.

    There’s nothing particularly special or damaging about this plugin code. It can mess with your .htaccess a bit, and that’s not always a safe thing to do. To fix that, after you remove the plugin, just delete or rename the .htaccess file and then visit the Settings->Permalinks page. WordPress will recreate the .htaccess file for you.

    The /assets/banner file is misplaced. It should not be in /trunk/assets, just in /assets. The plugin doesn’t need a copy of its own banner, most likely. 🙂

    Other than that, this plugin code looks clean and simple.

    Plugin Author Dipak C. Gajjar

    (@dipakcg)

    1 month ago

    @otto42, Thanks for looking into this.

    I will make sure the banner file is in its proper place.

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this review.

Views