Suggested scan feature

First of all, great plugin, thanks!!

I recently had a few of my WordPress sites hacked. One of the theme’s php files had code appended to the beginning. No huge damage done – an ad for Viagra was inserted.

WordFence didn’t catch it because these were non-public purchased themes not in the repository. Nothing you can do about that.

But, how about adding a scan to look for keywords like “viagra”, “cialis” and so forth in the output HTML of a site? Of course, if your site has this content on purpose, you should be able to turn this scan off.

Or, if you have a better idea on how to catch these, let me know.

Just an idea – again, great plugin!

Brian

https://wordpress.org/plugins/wordfence/