Site Lockdown Security is free on WordPress.org
Full Or Focused Review
What it means: Run Everything for a full review or choose focused areas when you already know where to look.
How to use it: Start broad during cleanup, then use focused scans to verify a folder or file area after changes.
Infection Scanner Guide
Infection ScannerExplained
This page breaks down the WP Site Lockdown Infection Scanner so site owners and support teams understand what gets reviewed, how findings should be handled, and why every result still needs human confirmation. It is built to surface suspicious files, infection patterns, and unexpected code so cleanup decisions can be made with confidence instead of guesswork.
Infection Findings ReportReview Ready
uploads/cache/.loader.phpExecutable payload detected in a media path.Flagged
theme assetCompare against the expected theme source.Queued
Scan Scope
Choose Everything or a focused WordPress area.Finding Review
Open each result and inspect the real file.False Positives
Treat every match as a lead to confirm.Reports
Export results for clients or technicians.Infection Scanner
The Infection Scanner reviews WordPress files for suspicious patterns and gives support teams a focused list of findings to verify. It is a review tool, not an automatic cleanup decision.
Manual Confirmation
What it means: A finding is a warning that needs review, not automatic proof of infection.
How to use it: Open the file, compare it with expected WordPress, plugin, or theme behavior, then decide what action is appropriate.
Report Sharing
What it means: Scanner results can be saved or shared when a host, client, or technician needs cleanup context.
How to use it: Export the report after reviewing the findings so the next person knows what was found and what still needs confirmation.
Important: Confirm every scanner result before deleting, ignoring, or replacing files.
