Scan wordpress themes from themeforest

When installing themes, it is important khổng lồ know that certain free WordPress themes come ridden with malware, broken code or malicious link to third các buổi tiệc nhỏ sites. This is especially so, if the không lấy phí WordPress theme is obtained outside the official WordPress repository. It becomes even scarier since most of these infected themes are offered in disguise of a special offer lớn the potential victims. While most of these infected WordPress themes may not contain harmful code but a backlink to a third-party site, some can contain encrypted code hidden inside theme files. Let’s look at how lớn detect malware và fix infected WordPress theme.

Bạn đang xem: Scan wordpress themes from themeforest

Detect Malware & Malicious in WordPress Themes

The first step in discovering hidden malware or malicious code in your WordPress theme is lớn kiểm tra if the files contained in the theme are all required in WordPress theme. WordPress theme has some basic files required & may have sầu additional files that are in folder called include, images and JS if any tệp tin has not been called in the functions.php file, it should be your first suspect. There are also a number of issues that can lead you to lớn suspecting your theme or website has been infected with a malware:

White screen of death: When your site shows sudden white screen of death, you should suspect there is a possibility of malware infection or malicious code in your website.

Malware Warning: Warning from the malware site and it should be displayed on your site either blocking your site entirely or partially.

WordPress .htaccess hijack: Your .htaccess has been high jacked và the site keeps redirecting to lớn sites that you don’t understands, at times the redirect is khổng lồ Google tìm kiếm.

Popup ads and redirects: Several popup ads all over the site that keep redirecting lớn more popups when you click on cthất bại button.

If you have sầu experienced these issues there is a high likelihood that your trang web has been infected and possibly your theme. I would lượt thích to narrow down to lớn WordPress themes malware infection & injection of malicious code & how to lớn get rid of it.

Reasons why WordPress theme is infected by Malware

When you are downloading & installing WordPress themes you should be very cautious not lớn download và install a WordPress theme from unknown sources, pirate websites or nulled themes websites. The danger of downloading và installing themes from these sites far outweigh the benefits of using such a theme.

I would recommover you to always install themes from WordPress repository like evolve whose authors are reputable. We also offer high unique themes that you can download from here

Most infected themes that have sầu malicious code or malware are always obtained outside WordPress repository or outside a reputable marketplace lượt thích Themeforest. These themes are infected since they are manipulated by hackers with the intention of stealing your data.

Xem thêm: Tài Khoản Lynda Là Gì ? Cách Đăng Ký Tài Khoản Khóa Học Lynda

I cannot overemphasize the need to install only those WordPress themes whose authors you can trust. Most of theme hackers want to lớn create a secret backliên kết lớn their site, get access to lớn your blog, redirect your site khổng lồ spam blogs, add advertisements banners to your site & worse bring your site down!

How to lớn Detect Malicious Code in WordPress Themes

Scanning WordPress Themes before Installation

The first step when scanning for malware in WordPress themes is to scan the zip file before you can even install it in your WordPress site. When I tải về a WordPress theme and want khổng lồ scan it for malware before install, I go khổng lồ Virus Total which is very useful scanning tool. I upload và analyze the zip for any malware or malicious code:

I to lớn use this site lớn scan for malware và malicious in WordPress theme since you can see a detailed report of a particular zip và see previous scan that have sầu been carried on this file. This helps you to lớn make an informed decision before you install WordPress theme.


Scanning Installed WordPress Themes

The fasthử nghiệm và easiest way lớn detect malware and malicious code in already installed WordPress themes is to lớn use a plugin called TAC, theme authentiđô thị checker. This plugin is priceless since it is able to scan your site và point out the location of malicious code making it easier for you to lớn remove sầu this code.

The first step to detecting malware and malicious code in your WordPress theme is to lớn download and install this plugin Theme Authenticity Checker (TAC)


How khổng lồ Scan a WordPress Theme for Malicious Code with TAC

After downloading & installing this plugin you should go lớn Dashboard > Appearance > TAC & will see danh mục of WordPress themes with the warnings highlighted in red for those that contain malicious code if your theme is ok you see the message against the theme:

As you can see on the image above sầu, on my localhost WordPress installation, I have sầu three themes installed and the active sầu theme is Evolve sầu. You can see after the scan TAC has passed the themes since they don’t contain any malicious code or malware.

Testing for Malicious Code in WordPress Themes

I would illustrate by installing some malicious code in one of the installed WordPress themes & we see what happens when TAC scans again. I have added malicious encrypted code in the footer of Twentysixteen theme as shown below:


After adding this malicious code in this theme, I go bachồng to TAC to kiểm tra if it has been detected và look at the details for this malicious code:


As you can see from the scan, already we can see that this Twentysixteen theme has some encrypted code. This makes TAC a very effective plugin for detecting malicious code in WordPress themes.

For you to lớn determine where the malicious code is located you need to clichồng on the details button và look at the file và line of code that has this malicious code:


Since we have located the file and the line of code where the encrypted code is located, we can navigate to lớn that file & clean up the tệp tin. After cleaning up the code, you can now kiểm tra to lớn see if the theme is clean:


After cleaning this theme we can now see that it is devoid of any malicious code or links.


Just as we have seen in this tutorial, WordPress themes can have injected malicious code that can harm or steal your information. It helps khổng lồ stop and think about the source before you install that WordPress theme.

If you would like khổng lồ have sầu surefire way keeping malware & malicious code in WordPress themes, the first step is installing themes you can trust. You can install our không tính tiền WordPress themes since they have sầu been tried & tested by thousands of clients.

Xem thêm: Lag Pole Drill Attachment For Top123, Top18 & Top24, Golf Top 18

Secondly, you need to scan WordPress themes that you suspect might be infected with malware or malicious code. I hope this article is an eye-opener to lớn you, please take time lớn nội dung your experience, ask any question regarding this topic or leave sầu a compliment in the comments section below.

Chuyên mục: Theme wordpress