Scan for common WordPress malware indicators, suspicious file changes, exposed backups, and core file integrity issues.