Checks if your site is exposed to, or was hacked through, PHP2Shell (critical PHP bug) and wp2shell (WordPress bug). Optional fixes you can undo.

Audit WordPress plugins and themes for web shells, Tiny File Manager injections, modified files, and official repository checksum mismatches.