WordPress malware

Google Safe Browsing, SmartScreen, antivirus and email blacklists: how to request a review in Search Console, when to do it and what timelines to expect.

How a JavaScript skimmer steals card data in the WooCommerce checkout, where it hides, how to find it from the browser and with a CSP, and what to…

Thousands of Japanese pages indexed under your domain: how cloaked SEO spam works, how to see it the way Google does, and how to clean up Search Console.

Redirects that fire only from smartphones, from Google and for logged-out visitors: how they work in .htaccess and PHP, how to reproduce them with curl and how to…

Must-use plugins and drop-ins such as db.php, object-cache.php and advanced-cache.php load automatically: how to check them and spot a backdoor.

Administrators created by malware hide from the Users screen: how to find them with SQL and WP-CLI, check application passwords and remove them.