abandoned-plugin
post-update
vulnerability
Vulnerable Plugin/Theme Version Flagged by a Security Scan
A vulnerability scanner or security feed reports a known CVE in an installed plugin/theme version, with no visible symptom on…
Read the fix hacked malwareSite Flagged as Hacked / Malware Warning
Browser, host, or Google Search Console shows a malware/compromised-site warning.
Read the fix malware spam-injectionMalware – Injected Spam Links or Redirects
Pages contain injected spam content, or visitors get redirected to an unrelated/malicious site.
Read the fix google-blacklist seoSite Blacklisted by Google Safe Browsing
Search Console or a direct check shows the domain flagged in Google's Safe Browsing list.
Read the fix hackedUnauthorized Admin User Created
An admin-level user exists that no one on the client or team side created.
Read the fix brute-force security-pluginRepeated Brute-Force Login Attempts Detected
Security logs show a high volume of failed login attempts, often from a rotating set of IPs.
Read the fix comment-spam security-pluginComment Spam Flood or Mass Spam User Registrations
Hundreds of spam comments or fake user accounts appear, filling the database and the moderation queue.
Read the fix