Running a malware scan on your WordPress site

Malware scanning and removal

Plesk Advisor security scan

1. Log in to Plesk
2. Go to Websites & Domains → your domain → Security
3. Click Scan for Malware
4. Review results and follow recommendations

WordPress security plugins

Install one of these trusted security plugins in WordPress:

• Wordfence Security — Real-time firewall and malware scanner
• Sucuri Security — Malware scanning and activity auditing
• iThemes Security — Brute-force protection and file scanning

Signs your site may be compromised

• Google shows a "This site may be hacked" warning
• Unexpected admin users in WordPress
• Spam links in your site content
• Your site redirects visitors to other websites
• Server resource usage spikes unexpectedly

After malware removal

• Change all passwords (WordPress admin, FTP, database)
• Update all plugins, themes, and WordPress core
• Request a Google Safe Browsing review if flagged