{"version":"1.0","provider_name":"dzn | blog | Web Design, Design, Marketing, Life.","provider_url":"https:\/\/www.dzn-studios.com\/blog","title":"Detecting Malicious Codes in Wordpress Themes\/Plugins","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"whVS4368Er\"><a href=\"https:\/\/www.dzn-studios.com\/blog\/detecting-malicious-codes-hidden-within-wordpress-themesplugins\/\">Detecting Malicious Codes Hidden Within WordPress Themes\/Plugins<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/www.dzn-studios.com\/blog\/detecting-malicious-codes-hidden-within-wordpress-themesplugins\/embed\/#?secret=whVS4368Er\" width=\"600\" height=\"338\" title=\"&#8220;Detecting Malicious Codes Hidden Within WordPress Themes\/Plugins&#8221; &#8212; dzn | blog | Web Design, Design, Marketing, Life.\" data-secret=\"whVS4368Er\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script type=\"text\/javascript\">\n\/* <![CDATA[ *\/\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/* ]]> *\/\n<\/script>\n","thumbnail_url":"https:\/\/www.dzn-studios.com\/blog\/wp-content\/uploads\/2017\/08\/Wordpress.jpg","thumbnail_width":1500,"thumbnail_height":843,"description":"Step 1:\u00a0Check for Virus and Trojans After downloading the plugin or theme, the first thing you should do is to check for virus, trojans and other worms that you may not like it. Go to VirusTotal.com and upload the zip file to check for virus. If your file is infected you will get a red signal and if not then you can move on to next step. &nbsp; Step 2: Check for unwanted codes in Plugins Now lets check for unwanted codes in plugins using another WordPress plugin called\u00a0Exploit Scanner,\u00a0which can be securely downloaded from WordPress website. After installing it go to\u00a0Dashboard &gt; Tools &gt; Exploit Scanner\u00a0and run the scan. It will take some time to\u00a0complete the scan and the time depends on number of plugins you have installed. After the scan you can see a list of codes that are suspected. You can use the browser search function to find the plugins that you installed from outside WordPress repository. &nbsp; Step 3: Check for Theme authenticity Adding a backlink in a free theme is very common technique but you can easily find those\u00a0exploited\u00a0themes by the plugin called\u00a0Theme Authenticity Checker (TAC). Install the plugin and go to\u00a0Dashboard &gt; Appearance &gt; [&hellip;]"}