Skip to content

Plugin Security Certification (PSC) by CleanTalk

Use only certified WordPress plugins for your website

Menu

  • CERTIFY PLUGIN

Author: Denis Shagimuratov

You are here: Home » Archives for Denis Shagimuratov

Major signs of Malware on an infected WordPress site

Major signs of Malware on an infected WordPress site

Hi guys, I’d like to share some significant signals that tell about infection on a WordPress site. These data has been collected by our research team at CleanTalk. The team reviews up to 10k files weekly as well as we

Denis Shagimuratov February 17, 2026 Experience, Security 5 Comments Read more

WordPress Plugin Security Certification 2025 — Nonce Validation Passed

fix WordPress nonce error

Certified Secure: GDPR Cookie Compliance 5.0.9 Available on WordPress.org: GDPR Cookie Compliance plugin page The GDPR Cookie Compliance plugin (v5.0.9) has successfully passed the CleanTalk Plugin Security Certification (PSC-2025-64591). The certification confirms that the team implements all security controls and

Denis Shagimuratov October 29, 2025November 21, 2025 Security No Comments Read more

Cron as the way to re-infect WordPress

Cron as the way to re-infect WordPress

Our research team discovered a new type of tricky malware that modify cron to re-infect a WordPress site. It causes some problems because of unusual way of infection. Cron is a task scheduler in Unix-based systems that allows specific commands

Denis Shagimuratov October 23, 2024November 20, 2024 Experience, Security 1 Comment Read more

radio.php infects WordPress

radio.php infects WordPress

Radio.php is a classical backdoor or shell, it is using to infect and take control of a site. Through this backdoor an attacker is able to, For a note, radios.php is not a part of standard WordPress setup. How can

Denis Shagimuratov October 18, 2024October 19, 2024 Experience, Security 1 Comment Read more

Feedback Log

  1. Force WordPress Users to Log Out | CleanTalk Shuffle Salts on SC WordPress Malware in functions.php, db.php, and 1j2d192.php: Polymorphic Loaders and CleanTalk Cure

    […] replacing exposed credentials and fixing the weakness that allowed entry. CleanTalk’s malware detection and Cure workflow addresses the infection.…

  2. SC WordPress Malware in functions.php, db.php & 1j2d192.php on WP2Shell WordPress RCE Explained: CVE-2026-63030 and CVE-2026-60137

    […] versions, request traces, and file timestamps are still required. CleanTalk’s separate WP2Shell technical analysis explains that RCE chain in…

  3. Disable PHP Execution in WordPress Uploads | CleanTalk on SC WordPress Malware in functions.php, db.php, and 1j2d192.php: Polymorphic Loaders and CleanTalk Cure

    […] not remove files, identify their origin, repair a vulnerable component, or rule out code elsewhere. Malware scanning and Cure…

  4. The New Wave of “Self-Healing” WordPress Malware Is Getting Scary – WP Minutes on SC WordPress Malware in functions.php, db.php, and 1j2d192.php: Polymorphic Loaders and CleanTalk Cure

    […] CleanTalk’s independent analysis of the same “SC” cluster gives a sense of scale — first samples on 6 August…

  5. Dmitrii I on SC WordPress Malware in functions.php, db.php, and 1j2d192.php: Polymorphic Loaders and CleanTalk Cure

    Hi there, Thank you for your experience. We will add a new info about this incident in the article +…

CleanTalk

  • About
  • Blog
  • Dashboard
  • Plugins security certification
  • WordPress Malware removal
  • Pricing
  • Sign up  / Sign In

Solutions

  • Anti-Spam for Websites
  • Anti-Spam Plugins
  • Check IP
  • Check Email
  • Filter fake emails
  • Gantt Charts
  • Hide contact data
  • Stop spam emails in Contact form 7 (CF7)
  • Stop spam in Elementor form builder
  • Stop spam in WPForms
  • Vulnerabilities and Security Researches
  • Website malware scanner
  • Best WordPress Security Plugin

Documentation

  • Help
  • Is my site infected?
  • License agreement
  • Privacy Policy
  • Refund Policy

Contact us

  • Create a support ticket
  • Contact us
  • Telegram
  • X

CleantTalk Inc ©, 111 Barclay Blvd, suite 202, Lincolnshire, IL, 60069.