How to check and correct WordPress core integrity issues

Overview

After a WordPress website has been exploited, it’s common for backdoors to be left so that hackers can easily gain access to your website again. A common way to do this is to place compromised code directly into the WordPress core files (eg, the index.php or one of the other standard files). While the original cause may have been fixed, these potential backdoors mean your site could be compromised again at any stage.

This article will step you through the process of checking the WordPress integrity for the core files and correct if required.

Make sure you have a backup before proceeding.

Instructions

1. Login to the Conetix Control Panel or direct via Plesk (for VPS customers).
2. Select the domain you wish to check the integrity for.
3. Select the WordPress Toolkit for the domain:
   
4. In the bottom bar, select “Check WordPress Integrity“:
   
5. This will open a wizard. Select “Verify Checksums“:
   
7. This will then verify the core WordPress files against the master files from wordpress.org.
8. If there are issues found, you may see:
   
   (the files listed may vary)
9. If you have double checked you have a backup and there are files to correct, you can select “Reinstall WordPress Core“:
   
10. This will re-download the WordPress Core and reinstall the files:
    
11. If this completed without errors, you should then see a final confirmation:
    
12. If you see an error, please read through the full details to confirm details such as the correct file permissions before retrying.

If any any stage you’re not sure about what the integrity check has found, please contact the Conetix support team before attempting any WordPress core re-installation.