DevDome Malware Scanner

DevDome Malware Scanner is a free GPL WordPress plugin for site owners replacing Wordfence, Sucuri or MalCare for malware scanning and cleanup. Available on WordPress.org, it scans files and database content locally for malicious code, backdoors and suspicious changes. Scanning and cleanup work without an account.

Core and WordPress.org plugin files are checked against official checksums. WordPress.org themes are compared with their installed version's release package. Custom and premium plugins and themes use a baseline that records changes without certifying the original files as safe.

Findings show evidence, severity and a separate confidence rating. Coverage gaps identify skipped, failed or incomplete checks. Unchecked areas are not reported as clean.

Quarantine removes eligible files from disk while keeping copies you can restore. Permanent deletion is a separate action. Eligible repairs reinstall the same core or plugin version from WordPress.org, with backups saved before replacement.

The Reinfection risks tab groups findings about administrator accounts, scheduled tasks, must-use plugins and drop-ins that could help malware return. Scans run manually or on daily or weekly schedules.

An optional free DevDome account adds downloaded byte-pattern signatures and remote malware hash lookups. Hash lookups send file hashes, not file contents. Official file verification still contacts WordPress.org.