WordPress malware investigation
Free WordPress antivirus tools - do they really work?
What free WordPress antivirus and malware scanner plugins can detect, what they miss, and why a clean scan does not always mean a clean site.
WebShield blog
WordPress security articles, guides, analysis and WebShield expert content.
WordPress malware investigation
How can I know for sure if my WordPress site has malware?
How to determine whether a WordPress site is infected, even when it appears clean after a scanner or a quick cleanup.
WordPress incident response
My website was hacked - what should I do in the first 30 minutes?
A practical first-30-minutes incident response plan for a hacked website, including when to ask WebShield for fast malware cleanup.
WordPress SEO spam
Why do Chinese characters appear in Google under my website?
What it means when Google shows Chinese or foreign-language snippets under your website and how to remove WordPress SEO spam safely.
WordPress incident response
An unknown admin user appeared in WordPress - what should I do now?
Immediate incident response steps when an unknown administrator appears in WordPress, from account removal to identifying the compromise path.
WordPress incident response
Why does my WordPress site get reinfected after cleanup?
The most common causes of WordPress reinfection, from persistent backdoors and vulnerable plugins to stolen admin credentials.
WordPress security
Managed WordPress security vs a security plugin - which is better?
How managed WordPress protection differs from a security plugin, and when a standalone plugin may still be enough.
WordPress SEO spam
Google is indexing spam pages from my website - how do I stop it?
What to do when Google indexes casino, pharmaceutical or foreign-language spam pages under your WordPress domain.
WordPress malware
WordPress redirects to other websites – causes and fixes
Why a WordPress site may redirect visitors to spam or scam pages, how to investigate it, and how to remove the infection permanently.
WordPress malware
Wordfence says the site is clean, but it is still infected
Why Wordfence may not detect a WordPress infection, what else to inspect, and how to prove whether the site is really clean.
WordPress incident response
Google Ads suspended my website for malicious software
What a Google Ads malicious software suspension means, how to investigate a WordPress site, and what to fix before requesting review.