=== Malcure Malware Scanner — Advanced Virus and Infection Cleanup ===
Contributors: malcure,cybermalcure
Tags: security, anti-malware, malware scanner, antivirus
Requires at least: 3.7.4
Tested up to: 6.9
Requires PHP: 5.6
Stable tag: 19.2
License: MIT
License URI: https://opensource.org/licenses/MIT

Malcure Malware Removal Detects 50,000+ threats, trusted by thousands, recommended by experts. Secure your site with precision.

== Description ==

**For cleaning up hacked websites.** Trusted by 10,000+ site owners. Instantly detect and remove threats. Reduce downtime. Reclaim your traffic, SEO & brand-reputation.

Scans entire website's files & database for malicious redirects, viruses, malware, infections, security-threats, trojans, backdoors, dolohen, code injections and over 50,000+ security threats & vulnerabilities. Stop Google blacklists and fix hacked SEO issues instantly.

It's a **super-precise malware scanner** yet light-weight, extremely simple and easy-to-use. With Malcure you can easily fix hacked site.

## No False Positives — Now Remove Malware With Confidence.

Malcure Malware Scanner scans all the files (including backups, archives, images, hidden files, logs, etc.) and database for malware including variants like C99, R57, RootShell, dolohan, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx and many more... Our Full-find Infection Scanner scans each and every file and even scans for hidden malware on your install for security threats & vulnerabilities.

## A Comprehensive Security Event Log — For Advanced Security Forensics.

Malcure Malware Scanner comes with a comprehensive security event log allowing you **Advanced Security Event Tracking** to help you trace back critical events that may have been the root-cause of a security issue. Easily identify malicious code origins, secure weak spots, and prevent future attacks.

**Nothing escapes Malcure Malware Scanner. It’s light-weight, simple and easy-to-use and extremely thorough.**

[youtube https://www.youtube.com/watch?v=EbSbxiTOc8k&rel=0]

### Core Features of Malcure Malware Scanner

Protect your site with these powerful features designed to prevent downtime, reclaim lost traffic, and safeguard your SEO.

* **Malware Scanning:** Malware scanner checks core files, themes, plugins and database for malware, infection, malicious redirects and code injections to help fix hacked websites.
* **Checksum / Integrity Checks:** Checksum / Integrity Check: Compares the core files, themes and plugins on your site with respective files on .org repository to check their integrity and report any changes by auto-syncing with Checksum API. Helps ensuring excellent security.
* **Google Search Console Integration:** Got a security warning from Google Search Console? Google Webmaster Tools? Malcure Malware Scanner integrates with Google™ Search Console to fetch security warnings or notices to warn you in time.
* **Detailed Infection Classification:** Clear categorization of threats (e.g. Redirect Hijack, Database Scan Results, File Scan Results). Malware details for each of the infected details.
* **Instant File Inspection:** Inspect infected files via the Malware Inspector.
* **System Status:** Quickly get an overview of all the critical and site related information.
* **Auto-Rescan:** Rescans files in case a file fails to scan the first time.
* **30-Day Scan Logs & 100-Day Event Logs:** Review historical data and events to track events that led to the current incident.
* **Custom Scans:** Skip / Scan specific files and directories to save time.

### Premium Features of Malcure Malware Scanner

Upgrade now to the Advanced Edition for advanced malware removal speed, deep protection, and instant recovery from hacker attacks.

* **Automatic Definition Updates:** Always up-to-date with the latest malware signatures.
* **Single-Click Repair:** Quickly clean, repair, or trust specific files each with a single-click to instantly to restore a clean, high-performing site.
* **Whitelisting of Files:** Quickly whitelist any with a single-click.
* **Comphrensive WP-CLI Support:** Run scans via the command line for advanced workflows, scripting and comprehensive automation.
* **Comphrensive Custom Definitions Patterns & Scan Filters:** Use custom definitions and patterns to scan for new virus strains.
* **Force Logout:** Force logout other logged-in users.
* **Targeted Scans:** Advanced scan filters to skip / scan specific files and directories to save time.
* **One-Click Results Copying:** Easy, one-click copy results to share scan-results.
* **On-Demand File-Inspection:** Inspect any file on-demand.
* **Reset Plugin:** Reset plugin settings to defaults.

[Click here to purchase Malcure Advanced Edition now!](https://malcure.com/?p=116&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr)

**Features You’ll Love:**

* Ultra-high-precision results.
* Auto-sync with Checksum API.
* Checks for viruses and infections using malware definitions.
* Latest and regularly updated malware signatures.
* Connects to the definition update server to fetch the latest definitions.

*Malcure Malware Scanner & Firewall is sophisticated and extremely powerful. It’s simple and does the job.*

### Additional Resources for Malware Removal

Follow these expert guides to remove malware, recover lost traffic, and restore your online reputation:

* [A step by step guide to remove the malware](https://malcure.com/?p=1540&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr).
* [Live Malware Infection Removal &Analysis](https://malcure.com/?p=5265&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr)

#### Need Professional Malware Help?

**Malware issues are time-sensitive and an effective way to fix your hacked site is to request malware cleanup by our security specialists.**

Our security team will fix and restore your hacked website before it damages your brand-reputation & kills SEO. Our malware clean-up service covers blacklist removal as well as restoration of Google Ad campaigns.

Don’t waste valuable time — our team can rescue your site now. **Click here to avail our popular [malware removal service →](https://malcure.com/?p=107&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr)** and get back online fast.

#### Powerful Malware Detection & Removal
#### Works Out of the Box.
#### No Configuration Headaches.
#### Easy & Simple to Configure & Use.
#### No Malware — No Google Penalties. Give Your SEO a Solid Boost.

NOTICE: The plugin makes call to [our malware definition api](https://wp-malware-removal.com/) to check for latest malware signatures (pretty much like what your site does when checking your plugins and themes for new versions. Staying up-to-date is a security best-practice. This ensures you have robust defense against evolving malware threats. Malcure Malware Scanner will inform you when there are new definition updates available. If you’re allergic to “phone home” scripts then don’t use this plugin (or the CMS at all for that matter). When the plugin needs SaaS-backed functionality (for example, Repair, Delete, Whitelist, licensed features, or other cloud-driven actions) it contacts the Malcure API. We send: website metadata and configuration details. This is required by our API to deliver the requested functionality.

== Installation ==

1. Upload the **Malcure Malware Scanner** folder to `/wp-content/plugins/`, or install directly from the Plugin Repository.
2. Activate the plugin through the **Plugins** menu.
3. (Optional) Configure firewall settings in the plugin’s settings page.

== Frequently Asked Questions ==

= My site is hacked. What should I do? =

Option 1: If you are tech-savvy, you can use this plugin, analyse the results and remove malware yourself.

Option 2: You can file a service request with us. Don’t delay—malware spreads fast! Our service includes malware cleanup and blacklist removal by our security analysts. [Please click here to file a support request](https://malcure.com/?p=107&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr).

= How to remove malware from website? =

Please see [How to use Malcure Malware Scanner Plugin for website Malware Removal](https://malcure.com/?p=9094&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr) and [10-Step Guide to Removing Malware from Your Site](https://malcure.com/?p=1&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr). Follow these steps for a permanent fix to secure your site and recover lost traffic.

= Why should I use Malcure Malware Scanner? =

Several reasons:

a) Malcure Malware Scanner scans all files, even images and archives so deep hidden malware is also easily detected.

b) Checks all core, theme and plugin files for checksums.

c) Scans over 50,000+ known malware including variants like C99, R57, RootShell, dolohan, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx and many more.

d) Hybrid scan ensures unknown threats are also identified.

In short, Malcure Malware Scanner detects everything. It's fast, simple to use and extremely thorough. With improved security, your site remains trustworthy, boosting SEO rankings, user confidence, and conversions.

= What support options are available for Malcure Malware Scanner users? =

Providing excellent support is extremely important to us. You can file a ticket at Malcure website and our dedicated web-security specialist will ensure that the matter is resolved to your satisfaction.

= Some files are detected by Malcure Malware Scanner as "suspicious". What gives? =

Malcure's SmartScan checks each file for malware. However some files aren't pure malware but may contain code that is suspicious and could do nasty things. You should carefully review and analyse them to see if they indeed do anything nasty.

= I can't get Malcure Malware Scanner to work. It hangs / doesn't complete the scan / breaks for some reason. =

If you think that the plugin is broken, [please report it here](https://malcure.com/?p=5677&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr).

Malcure Malware Scanner (or for that matter other plugins) may break on malware affected / broken websites. [Malcure Advanced Edition](https://malcure.com/?p=116&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr) integrates with WP CLI and allows you to complete the scan from WP CLI.

= My site is infected however Malcure Malware Scanner doesn't detect the infection. =

Malware keeps evolving. If you come across malware that Malcure Malware Scanner is not able to identify, you may [please report it here](https://malcure.com/?p=157&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr).

= What makes Malcure Malware Scanner different from other security plugins? =

Malcure Malware Scanner is a local website scanner with comprehensive file and database scanning capabilities. Malcure Malware Scanner does its job very well. If you have feedback, please do not hesitate to share with us.

Also Malcure Malware Scanner scans every file regardless of whether it's an image, archive etc. Modern malware hides in unsuspicious files and Malcure Malware Scanner makes sure those are not missed. Malcure Malware Scanner is extremely thorough and leaves no aspect of the site to speculation. Try Malcure to experience exceptional thoroughness and speed in removing website malware.

= Will Malcure Malware Scanner impact the performance of my website? =

Malcure Malware Scanner only runs when you want it to. At all other times it sleeps silently. The firewall triggers extremely quickly and is optimized for performance.

= The scan gets stuck midway. What should I do? =

In case of such an event, please file a support request with us and we'll be more than happy to troubleshoot the issue.

Please visit [this page](https://malcure.com/?p=5677&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr).

= I cleaned my site but it got infected again. What should I do? =

Malware cleanup is a waste of time and effort unless you find the root cause behind the malware infection. How was someone able to infect your website? Have you plugged in that security hole?

Please read [Why Do Websites Get Hacked](https://malcure.com/blog/security/why-do-wordpress-websites-get-hacked/).

= Google Safe Browsing site status (or some other scanner) still shows my site as infected. What should I do? =

First make sure you purge your site cache. Second, Google (and other scanners) cache the results for some time. You'll need to force or refresh the scan. You can also file a request with us to [get your site off any blacklists](https://www.malcure.com/?p=107&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr).

= Where can I find the Malcure Terms of Use and Privacy Policy? =

These are available on our website: [Terms of Use](https://www.malcure.com/?p=1720&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr) and [Privacy Policy](https://malcure.com/?p=3&utm_source=readmefaq&utm_medium=web&utm_campaign=wpmr)

== Screenshots ==

1. Plugin in Action.
2. Scan Results.
3. Event Log.
4. Advanced Scan Filters.
5. File Inspector.
6. Scan Log.
7. Hardening Settings.
8. Full View.
9. Malcure in WP CLI.
10. Malcure Scan Results in WP CLI.

== Changelog ==

= 19.2 =
Feature: Major performance optimization for checksums.
Feature: Enhanced SaaS API integration with signature verification.
Feature: Compatibility check for plugin version.
UX: Improved license validation and error messages.
UX: Better handling of database vs file infections in UI.

= 19.1 =
Feature: Introducing enhanced cleanup operations.

= 19.0 =
Bugfix: Enhanced detection of suspicious empty files in core directories.

= 17.9 =
UI: Updated to follow repository guidelines.

= 17.8 =
UX: Updated to work with new checksum endpoint.

= 17.7 =
Bugfix: Fixed a bug where errors during definition update wouldn't be reported.
Bugfix: Fixed a bug where plugin would run out of memory during definition update.
Others: Refactored code.

= 17.6 =
UI: Improved installation experience.
UI: Improved licensing validation.
Bugfix: Improved timeout during certain conditions.

= 17.5 =
UX: Added animation for operations in progress.
Bugfix: Fixed timeout for certain operations.

= 17.4 =
Feature: Major UI revamp.
Feature: Copy results button generated a well-formatted scan report.
Bugfix: Page hack scan would generate incorrect URL format.
Bugfix: Scan results would show all clear even when certain scans are skipped.

= 17.3 =
Bugfix: Potential false negatives for certain default files.
Bugfix: Fixed formating in WP CLI commands.
Bugfix: Core files could be whitelisted in the UI without effect.

= 17.2 =
Bugfix: File cleanup not working in advanced edition.

= 17.1.2 =
Bugfix: Fixed error if checksums could not be fetched.

= 17.1.1 =
Bugfix: Fixed error during activating from WP CLI.

= 17.1 =
* Security: Strongly recommend all users update to version 17.1 immediately.
* Security: Fixes CSRF and broken access control vulnerabilities.

= 16.9 =
* Security: Critical security update. Fixes CSRF and broken access control vulnerabilities in AJAX endpoints. All users should update immediately. Credit: Darius Sveikauskas, author oversight.

= 16.8 =
Bugfix: Admin Notice not clearing after cleanup.

= 16.7 =
Bugfix: More accurate memory handling.
Bugfix: Better handling of database exclusions.

= 16.6 =
Bugfix: Page hack test would throw an error under certain conditions.
Bugfix: Database scan output had an anomaly.
Others: Removed donation links.

= 16.5 =
* Minor: UI Update.
* Bugfix: Added license link for easy access.

= 16.4 =
* Bugfix: Fixed database query to scan options.

= 16.3 =
* Bugfix: Fixed UI not reflecting infection when infection detected in database.
* Bugfix: Fixed infection detected in database being missed in certain conditions.

= 16.2 =
* Bugfix: In certain conditions, suspicious files inside WP core directories would not show up on rescan.
* Bugfux: Not all sessions of the current user were terminated.

= 16.1 =
* Feature: Add logging for theme deletion and plugin deletion.
* Compatibility: Works with Multisite Newtwork.
* Minor: Updated capturing URL of failed logins.
* Minor: Better logging for checksum fetching failures.
* Minor: Other UI updates.

= 16.0 =
* Bugfix: Scanner Page could break on large sites.
* Minor: Other code refactoring and optimizations.

= 15.9 =
* Feature: Activation via WP CLI asks for license key so that it doesn't show in the shell history.
* Feature: Capture IP for events automatically.
* Bugfix: Metabox not showing sometimes.
* Minor: Show plugin version when in WP CLI.
* Minor: UI improvements.

= 15.8 =
* Feature: Faster Database Scans.
* Bugfix: Fixed shuffle_salts function.
* Bugfix: Fixed destroy_sessions function.
* Minor: Limited event log to 10,000 entries.
* Minor: More details for upgrade event in event log.
* Minor: Added serial number to the event log.
* Minor: Updated screenshots.

= 15.7 =
* Bugfix: Fixed issues with hidden meta-boxes.
* Bugfix: Fixed styling / sorting of Event Log.

= 15.6 =
* Feature: Comprehensive Event Log.
* Bugfix: Fixed issues with missing meta-boxes.

= 15.5 =
* Bugfix: Fixed issues with missing PHP function.
* Bugfix: Session buttons were not working.
* UX: Updated UX to sit better with branding.
* UX: Better UX with license management.

= 15.4 =
* Bugfix: Some paths were not queued for scan.

= 15.3 =
* Feature: Windows / Server / IIS compatible.
* Bugfix: Malware not reported when using WP CLI.
* Others: Various other refactorings.

= 15.2 =
* Bugfix: Redirect Hack Test is more robust.
* Bugfix: Scanning single file using WP CLI wasn't working.
* Better documentation for WP CLI usage.

= 15.1 =
* Bugfix: Database scan breks on strict hosts.

= 15.0 =
* Major: Scan database using batch processing.
* Ability to scan slow and large databases.
* Bugfix: Attempt to validate malware patterns.
* Bugfix: Checking site redirects throws warning under certain conditions.

= 14.3 =
* Changed default UI to dark skin.
* Added file blacklist.

= 14.2 =
* Updated logging.
* Made redirect scan optional.
* Other minor UI updates.

= 14.1 =
* Updated to exclude database records of a few security plugins.

= 14.0 =
* Bugfix: Incorrect activations displayed in Malcure Advanced Edition.

= 13.9 =
* Feature: Consistent UI.

= 13.8 =
* Feature: Allow clearing logs (Advanced Edition).
* Bugfix: Reset via WP CLI would fail.
* Several UI Updates.
* Several UX Updates.
* Updated WP CLI Help / Documentation.

= 13.7 =
* Bugfix: File Inspector doesn't reset when inspecting a new file.
* Bugfix: Unreadable files are not reported.
* Bugfix: Infection count is not copied in Advanced Edition.

= 13.6 =
* Minor Bugfix: Some hosts deny access to certain files.
* Minor Bugfix: Sometimes WP CLI scan times out.
* Minor Bugfix: Consolidated file validation calls.
* Major Update: Retired HTTP based scan via WP CLI.

= 13.5.1 =
* Minor Bugfix: Audio notifications not working by default.

= 13.5 =
* Feature: Audio notifications on scan completion.
* Bugfix: Better locale detection.

= 13.4 =
* Minor UI Update.
* Tweak to reduce load on API Server.

= 13.3 =
* Bugfix: Fully compatible with PHP 8.2.
* Bugfix: Fixed timeout issues. Our server is slow and we are working to expand our infrastructure and costs.
* Feature: Verbose details when copying results (Advanced Edition).

= 13.2 =
* Bugfix: Some ajax actions throw PHP warnings.

= 13.1 =
* Bugfix: Aggregate Scan-speed and start-time broken on second iteration.

= 13.0 =
* UX: Mouse-wheel event to update the scan speed slider.
* UX: Updated the default scan speed to 11.
* UX: Realistic time remaining on second iteration.

= 12.9 =
* Bugfix: File incorrectly being reported as a file inside core direrctories.

= 12.8 =
* Bugfix: Notification doesn't show correct message in some cases.

= 12.7 =
* Major UX improvements.
* Feature: Better notification system.
* Feature: Salt Shuffler.

= 12.6 =
* Feature: Added ability to save scan-log to a file when used with WP-CLI.

= 12.5 =
* Bugfix: Fixed formatting of copied results.
* Bugfix: Fixed js error when trying to repair a file.

= 12.4 =
* Bugfix: Error thrown when repairing a file.
* Bugfix: UI not reflecting the updated version of signatures.
* Bugfix: Better file filtering when website is installed in a custom directory.
* Bugfix: Better verbosity in WP CLI.
* Feature: Major revamp in CLI functions.
* Feature: Major revamp in CLI function documentation.

= 12.3 =
* Bugfix: Better support for symlinks on some web-hosts.
* Bugfix: Minor performance optimisations.

= 12.2 =
* Bugfix: Better support for symlinks.
* Bugfix: Results do not reset on rescan.

= 12.1 =
* Bugfix: Emergency Release. Missing function hrtime in PHP 5.6 breaks the plugin.

= 12.0 =
* Bugfix: Definition updates not available when automating with WP CLI.
* Feature: Ability to force reset in unattended mode with WP CLI
* Bugfix: Inconsistency with get_home_path and ABSPATH.
* Feature: Report timings during scan.
* Feature: Report when website is installed in a custom directory.
* Feature: Many UX improvements.
* Feature: Many code optimisations / refactoring, ability to traverse into softlinks.

= 11.9 =
* Bugfix: Scan failure reported as suspicious.
* Bugfix: Core file not reported if suspicious.
* Bugfix: Mismatching of version.php.
* Feature: Reset plugin settings via CLI.
* Feature: Other CLI improvements.

= 11.8 =
* Feature: Massive speed optimizations.
* Feature: Switched to more secure hash.

= 11.7 =
* Bugfix: Invalid suspicious incident count.

= 11.6 =
* New Feature: Infection Count.

= 11.5 =
* Bugfix: User not alerted by out of date definitions under certain conditions.

= 11.4 =
* Bugfix: User not alerted by out of date definitions.

= 11.3 =
* Better UX with CLI.
* Output detailed setup information during scan via CLI.
* Output customer info on license page.

= 11.2 =
* Bugfix: Definition Update Available notice doesn't get removed after updating definitions.
* Bugfix: Incorrect reflection of meta_id as post_id in database scan results.

= 11.1 =
* Enhancement: Report max_execution_time, memory_limit and memory_usage on WP CLI.
* UX: User-sessions-list takes up huge amount of vertical space on multi-user sites. Shifted it down.

= 11.0 =
* Bugfix: Visibly display message if site is experience an HTTP error.

= 10.9 =
* Bugfix: CLI scan dies after the default apache timeout on mod_php.
* Bugfix: Prioritised core files.

= 10.8 =
* Bugfix: CLI scan dies after the default apache timeout on mod_php.
* Bugfix: Fixed an error if PHP DOM extension php-xml is missing.

= 10.7 =
* Feature: Skin changer to configure UI for long working hours.

= 10.6 =
* Bugfix: Scan fails to initialize on large databases or huge number of files.
* Bugfix: CLI fails to clear infection status.
* Feature: Several other UI updates.
* Others: Code refactoring.

= 10.5 =
* Feature: UI updates.
* Feature: Disabled skipping binary files.
* Bugfix: Several minor bugfixes.

= 10.4 =
* Feature: Major UI overhaul.
* Feature: Added DeepScan™ & SpeedScan.
* Bugfix: Warning thrown when optimising checksums.
* Bugfix: Fixed the Copy button copying invalid file format to clipboard.
* Bugfix: Several scan optimisations.

= 10.3 =
* Bugfix: Prevent third-party metaboxes from polluting the UI.

= 10.2 =
* Major Bugfix: Prevent engine stats error / delays from hanging the UI.

= 10.1 =
* Feature: WP-CLI progressbar shows the file being scanned.
* Bugfix: WP-CLI colors remain affected if infection is detected.
* Bugfix: De-duplication of scan when batch size is 1.

= 10.0 =
* Bugfix: Advanced version throws error when running via WP-CLI

= 9.9 =
* Bugfix: Cannot activate license from commandline.
* Bugfix: WP CLI scan timesout in certain conditions.
* Bugfix: WP CLI scan throws fatal error in certain conditions.
* Several UI fixes.

= 9.8 =
* Bugfix: Logs generating PHP warnings.

= 9.7 =
* Added error control operator to suppress errors if allow_url_fopen is not available.

= 9.6 =
* Updated readme documentation.

= 9.5 =
* Minor UI Fixes

= 9.4 =
* Improvement: License activation shouldn't accept empty key.

= 9.3 =
* Recommit due to previous commit failure..
* Branding update.
* Bugfix: Definition-auto-update broken on WP CLI.

= 9.2 =
* Branding update.
* Bugfix: Definition-auto-update broken on WP CLI.

= 9.1 =
* UI bugfixes.

= 9.0 =
* Minor bugfixes.
* Added support button to report plugin issues.

= 8.9 =
* Minor bugfixes.

= 8.8 =
* Bugfix: Regression slowing down the scan.

= 8.7 =
* Option to disable automatic-definition updates.
* Theme checksums from the API.

= 8.6 =
* Bugfix: Suspicious files not reported sometimes.
* Updated first-run experience.

= 8.5 =
* Minor UI Updates.

= 8.4 =
* Major Bugfix: severe infections were missed sometimes.
* Bugfix: Report accurate definition count.

= 8.3 =
* Several minor bugfixes, optimizations and code refactoring.

= 8.2 =
* Bugfix: Files in root are ignored sometimes.
* Bugfix: Scan Only Dir not working.

= 8.1 =
* Feature: Check rougue redirects

= 8.0 =
* Added automation routines.

= 7.9 =
* Fixed a bug with capabilities.

= 7.8 =
* Added timestamp label on clean-scan notice.

= 7.7 =
* Bugfix: Manually entered search strings are not found (Advanced Version only).

= 7.6 =
* Bugfix: Fallback to default locale checksums in case checksums are not available.

= 7.5 =
* UI updates.
* Better message for clean site status.

= 7.4 =
* Bugfix: Updated textdomain as per specs "The text domain must match the slug of the plugin".

= 7.3 =
* Added verbose license status.

= 7.2 =
* Whitelist module update.
* Fixed missing asset throwing 404.

= 7.1 =
* UI improvements plus CSS refactorings.

= 7.0 =
* UI, Dashboard and branding updates.

= 6.9 =
* Clean, repair, whitelist, unwhitelist files.
* Major UI improvements.
* Real-time display of the file being scanned.
* Updated styles to match system / browser dark-mode.
* Major feature launch for Malcure Advanced Edition.

= 6.8 =
* Bugfix: License is not deactivated on plugin deactivation.
* Better cleanup on uninstall / deactivation.
* Better UI indicators for features available only in Advanced Edition.
* Tested and removed broken functions from CLI which only have full integration in Advanced Edition.

= 6.7 =
* Fixed a warning on WP CLI.
* Updated compatibility with version 5.4.1.
* Admin notice experience update.

= 6.6 =
* Several performance improvements and minor bugfixes.

= 6.5 =
* Tweaked checksum validity.
* Fixed compatibility error with wp_timezone_string on old WP installs.

= 6.4 =
* Scan-speed optimizations.

= 6.3 =
* Reuploaded due to svn issue.

= 6.2 =
* Show user role in user sessions.

= 6.1 =
* Bugfix: File repair operations throw error in error log if the operation fails.
* Update: List malware definition / signature version visibly on the CLI as well as web-UI.
* Several other minor updates.

= 6.0 =
* Bugfix: Show relevant notices only to relevant user-levels.
* Bugfix: Signup prompt breaks because of $ instead of jQuery.
* Bugfix: Title scan doesn't give reliable results.

= 5.9 =
* Fixes to time format in logs.
* Bugfix: Dashboard widget shows for all user-roles.
* Alternative async scan in WP CLI mode.

= 5.8 =
* Better handling of cleaned up files in scan logs.
* Multiple UI updates to "Logs" view.
* Bugfix: Scan status doesn't clear on clean scan.

= 5.7 =
* Feature: File clean up operations.
* Better visibility of support options.

= 5.6 =
* Disabled paranoid mode by default.
* Scan comments for malware-spam.

= 5.5 =
* Optimised scan for filesize.
* Added signature reporting in WP CLI.
* Minor bugfix in database scan.

= 5.4 =
* Bugfix: Typo in variable name.

= 5.3 =
* Feature: Malware scan logs for last 30 days.
* Implemented help section.
* Included links to T&C and privacy policy.
* Better first-run experience.
* Optimized memory usage.

= 5.2 =
* Linked results to infection details.
* Implemented notice before navigating away from results.

= 5.1 =
* Bugfix: Scan breaks if path has non-Latin1 characters.
* Bugfix: Force a premium checksum update on license activation.
* Bugfix: File name and path doesn't change in file inspector.

= 5.0 =
* Bugfix: Definition check times-out.
* UI updates.

= 4.9 =
* Fixed a bug that would break results in case of invalid response.

= 4.8 =
* Added infection details.
* Optimized performance.

= 4.7 =
* UX Revamp from the ground up.

= 4.6 =
* Bugfix: File scan results wouldn't show up sometimes.

= 4.5 =
* Fixed: Scroll to results wouldn't work when infnection is detected.
* Updated default no. of files per batch for faster scans.

= 4.4 =
* Bugfix: Definition update won't trigger sometimes.
* Bugfix: Result actionable wouldn't trigger sometimes.
* Bugfix: Plugin throws php warnings due to typo in function definition.

= 4.3 =
* Updated firewall settings.
* Ability to reset plugin data.
* Compatibility with version 5.3.

== Upgrade Notice ==

= 19.2 =
Feature: Major performance optimization for checksums.
Feature: Enhanced SaaS API integration with signature verification.
Feature: Compatibility check for plugin version.
UX: Improved license validation and error messages.
UX: Better handling of database vs file infections in UI.

= 19.1 =
Feature: Introducing enhanced cleanup operations.

= 19.0 =
Bugfix: Enhanced detection of suspicious empty files in core directories.

= 17.9 =
UI: Updated to follow repository guidelines.

= 17.8 =
UX: Updated to work with new checksum endpoint.

= 17.7 =
Bugfix: Fixed a bug where errors during definition update wouldn't be reported.
Bugfix: Fixed a bug where plugin would run out of memory during definition update.
Others: Refactored code.

= 17.6 =
UI: Improved installation experience.
UI: Improved licensing validation.
Bugfix: Improved timeout during certain conditions.

= 17.5 =
UX: Added animation for operations in progress.
Bugfix: Fixed timeout for certain operations.

= 17.4 =
Feature: Major UI revamp.
Feature: Copy results button generated a well-formatted scan report.
Bugfix: Page hack scan would generate incorrect URL format.
Bugfix: Scan results would show all clear even when certain scans are skipped.

= 17.3 =
Bugfix: Potential false negatives for certain default files.
Bugfix: Fixed formating in WP CLI commands.
Bugfix: Core files could be whitelisted in the UI without effect.

= 17.2 =
Bugfix: File cleanup not working in advanced edition.

= 17.1.2 =
Bugfix: Fixed error if checksums could not be fetched.

= 17.1.1 =
Bugfix: Fixed error during activating from WP CLI.

= 17.1 =
* Security: Strongly recommend all users update to version 17.1 immediately.
* Security: Fixes CSRF and broken access control vulnerabilities.

= 16.9 =
* Security: Critical security update. Fixes CSRF and broken access control vulnerabilities in AJAX endpoints. All users should update immediately. Credit: Darius Sveikauskas, author oversight.

= 16.8 =
Bugfix: Admin Notice not clearing after cleanup.

= 16.7 =
Bugfix: More accurate memory handling.
Bugfix: Better handling of database exclusions.

= 16.6 =
Bugfix: Page hack test would throw an error under certain conditions.
Bugfix: Database scan output had an anomaly.
Others: Removed donation links.

= 16.5 =
* Minor: UI Update.
* Bugfix: Added license link for easy access.

= 16.4 =
* Bugfix: Fixed database query to scan options.

= 16.3 =
* Bugfix: Fixed UI not reflecting infection when infection detected in database.
* Bugfix: Fixed infection detected in database being missed in certain conditions.

= 16.2 =
* Bugfix: In certain conditions, suspicious files inside WP core directories would not show up on rescan.
* Bugfux: Not all sessions of the current user were terminated.

= 16.1 =
* Feature: Add logging for theme deletion and plugin deletion.
* Compatibility: Works with Multisite Newtwork.
* Minor: Updated capturing URL of failed logins.
* Minor: Better logging for checksum fetching failures.
* Minor: Other UI updates.

= 16.0 =
* Bugfix: Scanner Page could break on large sites.
* Minor: Other code refactoring and optimizations.

= 15.9 =
* Feature: Activation via WP CLI asks for license key so that it doesn't show in the shell history.
* Feature: Capture IP for events automatically.
* Bugfix: Metabox not showing sometimes.
* Minor: Show plugin version when in WP CLI.
* Minor: UI improvements.

= 15.8 =
* Feature: Faster Database Scans.
* Bugfix: Fixed shuffle_salts function.
* Bugfix: Fixed destroy_sessions function.
* Minor: Limited event log to 10,000 entries.
* Minor: More details for upgrade event in event log.
* Minor: Added serial number to the event log.
* Minor: Updated screenshots.

= 15.7 =
* Bugfix: Fixed issues with hidden meta-boxes.
* Bugfix: Fixed styling / sorting of Event Log.

= 15.6 =
* Feature: Comprehensive Event Log.
* Bugfix: Fixed issues with missing meta-boxes.

= 15.5 =
* Bugfix: Fixed issues with missing PHP function.
* Bugfix: Session buttons were not working.
* UX: Updated UX to sit better with branding.
* UX: Better UX with license management.

= 15.4 =
* Bugfix: Some paths were not queued for scan.

= 15.3 =
* Feature: Windows / Server / IIS compatible.
* Bugfix: Malware not reported when using WP CLI.
* Others: Various other refactorings.

= 15.2 =
* Bugfix: Redirect Hack Test is more robust.
* Bugfix: Scanning single file using WP CLI wasn't working.
* Better documentation for WP CLI usage.

= 15.1 =
* Bugfix: Database scan breks on strict hosts.

= 15.0 =
* Major: Scan database using batch processing.
* Ability to scan slow and large databases.
* Bugfix: Attempt to validate malware patterns.
* Bugfix: Checking site redirects throws warning under certain conditions.

= 14.3 =
* Changed default UI to dark skin.
* Added file blacklist.

= 14.2 =
* Updated logging.
* Made redirect scan optional.
* Other minor UI updates.

= 14.1 =
* Updated to exclude database records of a few security plugins.

= 14.0 =
* Bugfix: Incorrect activations displayed in Malcure Advanced Edition.

= 13.9 =
* Feature: Consistent UI.

= 13.8 =
* Feature: Allow clearing logs (Advanced Edition).
* Bugfix: Reset via WP CLI would fail.
* Several UI Updates.
* Several UX Updates.
* Updated WP CLI Help / Documentation.

= 13.7 =
* Bugfix: File Inspector doesn't reset when inspecting a new file.
* Bugfix: Unreadable files are not reported.
* Bugfix: Infection count is not copied in Advanced Edition.

= 13.6 =
* Minor Bugfix: Some hosts deny access to certain files.
* Minor Bugfix: Sometimes WP CLI scan times out.
* Minor Bugfix: Consolidated file validation calls.
* Major Update: Retired HTTP based scan via WP CLI.

= 13.5.1 =
* Minor Bugfix: Audio notifications not working by default.

= 13.5 =
* Feature: Audio notifications on scan completion.
* Bugfix: Better locale detection.

= 13.4 =
* Minor UI Update.
* Tweak to reduce load on API Server.

= 13.3 =
* Bugfix: Fully compatible with PHP 8.2.
* Bugfix: Fixed timeout issues. Our server is slow and we are working to expand our infrastructure and costs.
* Feature: Verbose details when copying results (Advanced Edition).

= 13.2 =
* Bugfix: Some ajax actions throw PHP warnings.

= 13.1 =
* Bugfix: Aggregate Scan-speed and start-time broken on second iteration.

= 13.0 =
* UX: Mouse-wheel event to update the scan speed slider.
* UX: Updated the default scan speed to 11.
* UX: Realistic time remaining on second iteration.

= 12.9 =
* Bugfix: File incorrectly being reported as a file inside core direrctories.

= 12.8 =
* Bugfix: Notification doesn't show correct message in some cases.

= 12.7 =
* Major UX improvements.
* Feature: Better notification system.
* Feature: Salt Shuffler.

= 12.6 =
* Feature: Added ability to save scan-log to a file when used with WP-CLI.

= 12.5 =
* Bugfix: Fixed formatting of copied results.
* Bugfix: Fixed js error when trying to repair a file.

= 12.4 =
* Bugfix: Error thrown when repairing a file.
* Bugfix: UI not reflecting the updated version of signatures.
* Bugfix: Better file filtering when website is installed in a custom directory.
* Bugfix: Better verbosity in WP CLI.
* Feature: Major revamp in CLI functions.
* Feature: Major revamp in CLI function documentation.

= 12.3 =
* Bugfix: Better support for symlinks on some web-hosts.
* Bugfix: Minor performance optimisations.

= 12.2 =
* Bugfix: Better support for symlinks.
* Bugfix: Results do not reset on rescan.

= 12.1 =
* Bugfix: Emergency Release. Missing function hrtime in PHP 5.6 breaks the plugin.

= 12.0 =
* Bugfix: Definition updates not available when automating with WP CLI.
* Feature: Ability to force reset in unattended mode with WP CLI
* Bugfix: Inconsistency with get_home_path and ABSPATH.
* Feature: Report timings during scan.
* Feature: Report when website is installed in a custom directory.
* Feature: Many UX improvements.
* Feature: Many code optimisations / refactoring, ability to traverse into softlinks.

= 11.9 =
* Bugfix: Scan failure reported as suspicious.
* Bugfix: Core file not reported if suspicious.
* Bugfix: Mismatching of version.php.
* Feature: Reset plugin settings via CLI.
* Feature: Other CLI improvements.

= 11.8 =
* Feature: Massive speed optimizations.
* Feature: Switched to more secure hash.

= 11.7 =
* Bugfix: Invalid suspicious incident count.

= 11.6 =
* New Feature: Infection Count.

= 11.5 =
* Bugfix: User not alerted by out of date definitions under certain conditions.

= 11.4 =
* Bugfix: User not alerted by out of date definitions.

= 11.3 =
* Better UX with CLI.
* Output detailed setup information during scan via CLI.
* Output customer info on license page.

= 11.2 =
* Bugfix: Definition Update Available notice doesn't get removed after updating definitions.
* Bugfix: Incorrect reflection of meta_id as post_id in database scan results.

= 11.1 =
* Enhancement: Report max_execution_time, memory_limit and memory_usage on WP CLI.
* UX: User-sessions-list takes up huge amount of vertical space on multi-user sites. Shifted it down.

= 11.0 =
* Bugfix: Visibly display message if site is experience an HTTP error.

= 10.9 =
* Bugfix: CLI scan dies after the default apache timeout on mod_php.
* Bugfix: Prioritised core files.

= 10.8 =
* Bugfix: CLI scan dies after the default apache timeout on mod_php.
* Bugfix: Fixed an error if PHP DOM extension php-xml is missing.

= 10.7 =
* Feature: Skin changer to configure UI for long working hours.

= 10.6 =
* Bugfix: Scan fails to initialize on large databases or huge number of files.
* Bugfix: CLI fails to clear infection status.
* Feature: Several other UI updates.
* Others: Code refactoring.

= 10.5 =
* Feature: UI updates.
* Feature: Disabled skipping binary files.
* Bugfix: Several minor bugfixes.

= 10.4 =
* Feature: Major UI overhaul.
* Feature: Added DeepScan™ & SpeedScan.
* Bugfix: Warning thrown when optimising checksums.
* Bugfix: Fixed the Copy button copying invalid file format to clipboard.
* Bugfix: Several scan optimisations.

= 10.3 =
* Bugfix: Prevent third-party metaboxes from polluting the UI.

= 10.2 =
* Major Bugfix: Prevent engine stats error / delays from hanging the UI.

= 10.1 =
* Feature: WP-CLI progressbar shows the file being scanned.
* Bugfix: WP-CLI colors remain affected if infection is detected.
* Bugfix: De-duplication of scan when batch size is 1.

= 10.0 =
* Bugfix: Advanced version throws error when running via WP-CLI

= 9.9 =
* Bugfix: Cannot activate license from commandline.
* Bugfix: WP CLI scan timesout in certain conditions.
* Bugfix: WP CLI scan throws fatal error in certain conditions.
* Several UI fixes.

= 9.8 =
* Bugfix: Logs generating PHP warnings.

= 9.7 =
* Added error control operator to suppress errors if allow_url_fopen is not available.

= 9.6 =
* Updated readme documentation.

= 9.5 =
* Minor UI Fixes

= 9.4 =
* Improvement: License activation shouldn't accept empty key.

= 9.3 =
* Recommit due to previous commit failure..
* Branding update.
* Bugfix: Definition-auto-update broken on WP CLI.

= 9.2 =
* Branding update.
* Bugfix: Definition-auto-update broken on WP CLI.

= 9.1 =
* UI bugfixes.

= 9.0 =
* Minor bugfixes.
* Added support button to report plugin issues.

= 8.9 =
* Minor bugfixes.

= 8.8 =
* Bugfix: Regression slowing down the scan.

= 8.7 =
* Option to disable automatic-definition updates.
* Theme checksums from the API.

= 8.6 =
* Bugfix: Suspicious files not reported sometimes.
* Updated first-run experience.

= 8.5 =
* Minor UI Updates.

= 8.4 =
* Major Bugfix: severe infections were missed sometimes.
* Bugfix: Report accurate definition count.

= 8.3 =
* Several minor bugfixes, optimizations and code refactoring.

= 8.2 =
* Bugfix: Files in root are ignored sometimes.
* Bugfix: Scan Only Dir not working.

= 8.1 =
* Feature: Check rougue redirects

= 8.0 =
* Added automation routines.

= 7.9 =
* Fixed a bug with capabilities.

= 7.8 =
* Added timestamp label on clean-scan notice.

= 7.7 =
* Bugfix: Manually entered search strings are not found (Advanced Version only).

= 7.6 =
* Bugfix: Fallback to default locale checksums in case checksums are not available.

= 7.5 =
* UI updates.
* Better message for clean site status.

= 7.4 =
* Bugfix: Updated textdomain as per specs "The text domain must match the slug of the plugin".

= 7.3 =
* Added verbose license status.

= 7.2 =
* Whitelist module update.
* Fixed missing asset throwing 404.

= 7.1 =
* UI improvements plus CSS refactorings.

= 7.0 =
* UI, Dashboard and branding updates.

= 6.9 =
* Clean, repair, whitelist, unwhitelist files.
* Major UI improvements.
* Real-time display of the file being scanned.
* Updated styles to match system / browser dark-mode.
* Major feature launch for Malcure Advanced Edition.

= 6.8 =
* Bugfix: License is not deactivated on plugin deactivation.
* Better cleanup on uninstall / deactivation.
* Better UI indicators for features available only in Advanced Edition.
* Tested and removed broken functions from CLI which only have full integration in Advanced Edition.

= 6.7 =
* Fixed a warning on WP CLI.
* Updated compatibility with version 5.4.1.
* Admin notice experience update.

= 6.6 =
* Several performance improvements and minor bugfixes.

= 6.5 =
* Tweaked checksum validity.
* Fixed compatibility error with wp_timezone_string on old WP installs.

= 6.4 =
* Scan-speed optimizations.

= 6.3 =
* Reuploaded due to svn issue.

= 6.2 =
* Show user role in user sessions.

= 6.1 =
* Bugfix: File repair operations throw error in error log if the operation fails.
* Update: List malware definition / signature version visibly on the CLI as well as web-UI.
* Several other minor updates.

= 6.0 =
* Bugfix: Show relevant notices only to relevant user-levels.
* Bugfix: Signup prompt breaks because of $ instead of jQuery.
* Bugfix: Title scan doesn't give reliable results.

= 5.9 =
* Fixes to time format in logs.
* Bugfix: Dashboard widget shows for all user-roles.
* Alternative async scan in WP CLI mode.

= 5.8 =
* Better handling of cleaned up files in scan logs.
* Multiple UI updates to "Logs" view.
* Bugfix: Scan status doesn't clear on clean scan.

= 5.7 =
* Feature: File clean up operations.
* Better visibility of support options.

= 5.6 =
* Disabled paranoid mode by default.
* Scan comments for malware-spam.

= 5.5 =
* Optimised scan for filesize.
* Added signature reporting in WP CLI.
* Minor bugfix in database scan.

= 5.4 =
* Bugfix: Typo in variable name.

= 5.3 =
* Feature: Malware scan logs for last 30 days.
* Implemented help section.
* Included links to T&C and privacy policy.
* Better first-run experience.
* Optimized memory usage.

= 5.2 =
* Linked results to infection details.
* Implemented notice before navigating away from results.

= 5.1 =
* Bugfix: Scan breaks if path has non-Latin1 characters.
* Bugfix: Force a premium checksum update on license activation.
* Bugfix: File name and path doesn't change in file inspector.

= 5.0 =
* Bugfix: Definition check times-out.
* UI updates.

= 4.9 =
* Fixed a bug that would break results in case of invalid response.

= 4.8 =
* Added infection details.
* Optimized performance.

= 4.7 =
* UX Revamp from the ground up.

= 4.6 =
* Bugfix: File scan results wouldn't show up sometimes.

= 4.5 =
* Fixed: Scroll to results wouldn't work when infnection is detected.
* Updated default no. of files per batch for faster scans.

= 4.4 =
* Bugfix: Definition update won't trigger sometimes.
* Bugfix: Result actionable wouldn't trigger sometimes.
* Bugfix: Plugin throws php warnings due to typo in function definition.

= 4.3 =
* Updated firewall settings.
* Ability to reset plugin data.
* Compatibility with version 5.3.
