Tisalabs Knowledge Base
Yes, the plugin scans the entire WordPress installation, including core files, themes, and plugins — both standard and custom. It compares code patterns against known malware signatures and identifies suspicious or obfuscated code. For custom code, it uses heuristic analysis to flag anomalies that may indicate malicious behavior, even if the code is not part of any known vulnerability database.
If you still can't find an answer to what you're looking for, or you have a specific question, open a new ticket and we'd be happy to help!
Contact Us