{"id":11217,"date":"2026-05-28T01:30:05","date_gmt":"2026-05-27T17:30:05","guid":{"rendered":"https:\/\/aeosub.com\/cleverhog-malware-scanner\/"},"modified":"2026-05-28T01:30:05","modified_gmt":"2026-05-27T17:30:05","slug":"cleverhog-malware-scanner","status":"publish","type":"post","link":"https:\/\/aeosub.com\/zh\/cleverhog-malware-scanner\/","title":{"rendered":"Cleverhog Malware Scanner"},"content":{"rendered":"
\"Cleverhog<\/div>\n
\n\n\n\n\n\n\n\n
Developer<\/th>\ncleverhog<\/a><\/td>\n<\/tr>\n
Version<\/th>\nv1.6.7<\/td>\n<\/tr>\n
Active Installs<\/th>\n0 +<\/td>\n<\/tr>\n
Requires \/ Tested<\/th>\n5.8 \/ 7.0<\/td>\n<\/tr>\n
Last Updated<\/th>\n2026-05-27 4:24pm GMT<\/td>\n<\/tr>\n
Official Link<\/th>\nView Details \u2192<\/a><\/td>\n<\/tr>\n<\/table><\/div>\n
Free WordPress malware scanner by Cleverhog: detect suspicious files, backdoors, weak logins, and outdated software from your dashboard.<\/div>\n

Cleverhog Malware Scanner<\/strong> helps you investigate a suspicious or compromised WordPress site from the admin dashboard. It is free<\/strong> and may be used on unlimited websites<\/strong> with no license keys or per-site fees.<\/p>\n

This plugin detects and reports<\/strong> potential security issues. It does not<\/strong> automatically remove malware or guarantee that a site is clean. Always back up your site before changing or deleting files.<\/p>\n

What it scans<\/h4>\n
    \n
  • Files<\/strong> \u2014 Pattern-based scan of themes, plugins, uploads, wp-content, or the full site (with code snippets, file size, and last-modified date)<\/li>\n
  • Backdoors<\/strong> \u2014 Must-use plugins, drop-ins, wp-config, cron jobs, and suspicious hooks<\/li>\n
  • .htaccess<\/strong> \u2014 Discovers .htaccess<\/code> files site-wide and lists suspicious redirects, PHP handlers in uploads, auto_prepend, cloaking rules, and more<\/li>\n
  • Authentication<\/strong> \u2014 XML-RPC, user enumeration, weak salts, file editor, and SSL-related checks<\/li>\n
  • Database<\/strong> \u2014 Suspicious autoloaded options and injected post content<\/li>\n
  • Administrators<\/strong> \u2014 All admin users with registration dates and risk flags<\/li>\n
  • Updates<\/strong> \u2014 Outdated plugins, themes, and core (high for major\/minor updates, medium for patches only)<\/li>\n
  • Plugin integrity<\/strong> \u2014 WordPress.org plugins compared to official checksums (one summary per plugin)<\/li>\n<\/ul>\n

    Features<\/h4>\n
      \n
    • Live threat counter during scans<\/li>\n
    • Results sorted by severity (critical, high, medium, low)<\/li>\n
    • Last scan results restored when you reopen the dashboard<\/li>\n
    • Admin menu badge showing critical issue count<\/li>\n
    • Excludes this plugin\u2019s own files from file scans to reduce false positives<\/li>\n<\/ul>\n

      Privacy<\/h3>\n

      This plugin runs entirely on your server. Scans do not send your site files to the plugin author.<\/p>\n

      When you run a scan, the plugin may contact:<\/p>\n

        \n
      • WordPress.org<\/strong> (downloads.wordpress.org<\/code>) \u2014 to fetch official plugin checksums for integrity verification<\/li>\n
      • WordPress.org update APIs<\/strong> \u2014 to check for available plugin, theme, and core updates (standard WordPress behavior)<\/li>\n<\/ul>\n

        No personal data is collected by the plugin author. Scan results are stored in your WordPress database (options and transients) for display in the admin dashboard and are visible to users who can manage the site.<\/p>\n

        Support<\/h3>\n

        Support is provided through the WordPress.org support forums after publication.<\/p>","protected":false},"excerpt":{"rendered":"

        Free WordPress malware scanner by Cleverhog: detect suspicious files, backdoors, weak logins, and outdated software from your dashboard.<\/p>","protected":false},"author":1,"featured_media":9317,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[252],"tags":[2310,2311,2312,1094,664,555],"class_list":["post-11217","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trends","tag-backdoor","tag-hacked","tag-malware","tag-scanner","tag-security","tag-wordpress-plugin"],"_links":{"self":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/comments?post=11217"}],"version-history":[{"count":0,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11217\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media\/9317"}],"wp:attachment":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media?parent=11217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/categories?post=11217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/tags?post=11217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}