How advision-development/wordpress-malware-quick-scan works
WordPress Malware Quick Scan is a read-only malware and integrity scanner with carefully gated, person-triggered actions for reported targets. Its main workflow is an administrator starting a scan, reviewing findings and coverage, then optionally taking an explicitly offered action. The README documents the scan phases and campaign refresh; sampled excerpts show guarded AJAX handling, report construction concepts and plugin bootstrap hooks. Detailed wiring among unsampled scanner modules is not inferred.
Main entry points: class-scan-runner.php Scan runner · class-actions.php Reported-target actions · class-admin-page.php Admin screen · class-ajax-controller.php AJAX controller
Components 34
Scanning and detection
- Scan runner
wordpress-malware-quick-scan/includes/class-scan-runner.php - Scan state
wordpress-malware-quick-scan/includes/class-scan-state.php - Scan budget
wordpress-malware-quick-scan/includes/class-budget.php - Core integrity
wordpress-malware-quick-scan/includes/class-core-scanner.php - File inspection
wordpress-malware-quick-scan/includes/class-file-scanner.php - File traversal
wordpress-malware-quick-scan/includes/class-file-walker.php - Directory checks
wordpress-malware-quick-scan/includes/class-directory-check.php - Suspicious rules
wordpress-malware-quick-scan/includes/class-suspicious-rules.php - Database audit
wordpress-malware-quick-scan/includes/class-database-scanner.php - Options audit
wordpress-malware-quick-scan/includes/class-options-scanner.php - Hijack checks
wordpress-malware-quick-scan/includes/class-hijack-check.php - Persistence checks
wordpress-malware-quick-scan/includes/class-persistence-check.php
Reports and administration
- Admin screen
wordpress-malware-quick-scan/includes/class-admin-page.php - AJAX controller
wordpress-malware-quick-scan/includes/class-ajax-controller.php - Finding catalog
wordpress-malware-quick-scan/includes/class-finding.php - Coverage summary
wordpress-malware-quick-scan/includes/class-coverage.php - Report builder
wordpress-malware-quick-scan/includes/class-report.php
Manual response
- Reported-target actions
wordpress-malware-quick-scan/includes/class-actions.php - Quarantine store
wordpress-malware-quick-scan/includes/class-quarantine.php - Account suspension
wordpress-malware-quick-scan/includes/class-account-suspend.php - Plugin archive
wordpress-malware-quick-scan/includes/class-plugin-archive.php
Scheduling and fleet
- Scheduled scans
wordpress-malware-quick-scan/includes/class-cron.php - Scan settings
wordpress-malware-quick-scan/includes/class-settings.php - Report email
wordpress-malware-quick-scan/includes/class-mailer.php - Fleet coordination
wordpress-malware-quick-scan/includes/class-fleet.php - Fleet panel
wordpress-malware-quick-scan/includes/class-fleet-panel.php - Site verification
wordpress-malware-quick-scan/includes/class-fleet-verify.php - Plugin updater
wordpress-malware-quick-scan/includes/class-updater.php
Campaign intelligence
- Indicator validation
wordpress-malware-quick-scan/includes/class-ioc.php - Campaign pack
wordpress-malware-quick-scan/includes/class-csv-pack.php - Campaign intelligence
wordpress-malware-quick-scan/includes/class-threat-intel.php - Campaign indicators
wordpress-malware-quick-scan/campaigns.csv - Research prompt
tools/class-ioc-prompt.php
Other components
- Administrator
Connections 26
- Administrator → Admin screen: opens
README.md - Admin screen → AJAX controller: starts scan
README.md - AJAX controller → Scan runner: requests scan
wordpress-malware-quick-scan/includes/class-ajax-controller.php - Scan runner → Core integrity: runs phase
- Scan runner → File inspection: runs phase
- Scan runner → Database audit: runs phase
- File inspection → File traversal: traverses files
- File inspection → Suspicious rules: checks patterns
- Scan runner → Report builder: builds report
- Report builder → Finding catalog: formats findings
- Report builder → Coverage summary: records coverage
- Admin screen → Report builder: presents report
README.md - Administrator → AJAX controller: requests action
README.md - AJAX controller → Reported-target actions: dispatches action
wordpress-malware-quick-scan/includes/class-ajax-controller.php - Reported-target actions → Quarantine store: uses quarantine
- Reported-target actions → Account suspension: suspends account
- Reported-target actions → Plugin archive: packages plugin
- Scheduled scans → Scan runner: schedules scan
- Scan settings → Scheduled scans: sets schedule
- Scan runner → Report email: emails report
- Fleet panel → Fleet coordination: manages fleet
- Fleet coordination → Site verification: verifies site
- Indicator validation → Campaign pack: validates records
- Campaign indicators → Campaign intelligence: supplies indicators
README.md - Campaign intelligence → Campaign indicators: refreshes pack
README.md - Research prompt → Admin screen: offers research prompt