Journal
WP Cleanr journal
How the scanner actually behaves. No malware samples, no payloads, no tutorials for writing them.
WordPress as untrusted data
2026-09-11
The analyzed WordPress install is untrusted data. Cleanr Engine does not include, eval, or launch WP-CLI against it. That constraint is the product, not a footnote.
FREE Scan vs deep scan
2026-09-11
FREE Scan is unauthenticated HTTP. The deep WordPress malware scanner hashes files, checks integrity, and scores YARA/heuristics. They are not the same product surface.
PHP in uploads is evidence
2026-09-11
A PHP file under wp-content/uploads is scored as php_in_uploads. The engine never runs it. Quarantine still needs Apply. This article contains no malware samples.
The connector is not a scanner
2026-09-11
The WordPress plugin jails reads under ABSPATH with HMAC. It does not scan for malware and cannot apply clean or harden. Those jobs stay on SSH.