| wp-content/wpauditor-backups/.htaccessWordPress installation · 14 B · SHA-256 ef94d4c2ac2a… | 8 minutes ago Security-sensitive configuration file changed2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Security-sensitive configuration file changed
recent.security_configuration
| Medium45/100Medium confidence | htaccess
text/plain
Permissions 0644 | 2026-09-24 18:05:36 | |
| wp-content/wpauditor-backups/index.htmlWordPress installation · · SHA-256 e3b0c44298fc… | 8 minutes ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | html
application/x-empty
Permissions 0644 | 2026-09-24 18:05:36 | |
| wp-content/plugins/mu-plugins/wpauditor-demo.phpPlugins · 8 KB · SHA-256 1c0a1cefc433… | 5 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0644 | 2026-09-24 13:09:53 | |
| wp-content/plugins/mu-plugins/index.phpPlugins · 28 B · SHA-256 bd48c24ce450… | 5 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0644 | 2026-09-24 12:59:51 | |
| .env.productionWordPress root · 183 B · SHA-256 c7ba5fd40063… | 5 hours ago Hidden file changed under the WordPress installation2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Hidden file changed under the WordPress installation
recent.hidden_file
| Low20/100Low confidence | production
text/plain
Permissions 0770 | 2026-09-24 12:51:19 | |
| site-backup-demo.zipWordPress root · 404 B · SHA-256 f801102cd636… | 5 hours ago File modification time is within the selected monitoring window1 matched signal- File modification time is within the selected monitoring window
recent.mtime
| Info0/100Low confidence | zip
application/zip
Permissions 0770 | 2026-09-24 12:51:19 | |
| wp-admin/admin_tool.phpWordPress core · 79 B · SHA-256 a64e02722226… | 5 hours ago Executable or active-content file changed within the last 24 hours3 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h - WordPress core file changed; verify it with Core Integrity
recent.core_change
| Low35/100Low confidence | php
text/x-php
Permissions 0770 | 2026-09-24 12:51:19 | |
| wp-config.php.bakWordPress root · 222 B · SHA-256 0a81dcbe22ef… | 5 hours ago Filename uses a potentially misleading executable double extension2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Filename uses a potentially misleading executable double extension
recent.double_extension
| Medium40/100Medium confidence | bak
text/x-php
Permissions 0770 | 2026-09-24 12:51:19 | |
| wp-content/plugins/wordpress_store_2026.sqlPlugins · 198 B · SHA-256 c4a247d189d9… | 5 hours ago File modification time is within the selected monitoring window1 matched signal- File modification time is within the selected monitoring window
recent.mtime
| Info0/100Low confidence | sql
text/plain
Permissions 0770 | 2026-09-24 12:51:19 | |
| wp-content/uploads/2026/09/avatar.php.jpgMedia uploads · 145 B · SHA-256 0fd32e987b4e… | 5 hours ago Filename uses a potentially misleading executable double extension3 matched signals- File modification time is within the selected monitoring window
recent.mtime - Filename uses a potentially misleading executable double extension
recent.double_extension - PHP code marker detected in a recently changed upload
recent.upload_embedded_php
| Critical100/100High confidence | jpg
text/x-php
Permissions 0770 | 2026-09-24 12:51:19 | |
| wp-content/uploads/2026/09/shell_console.phtmlMedia uploads · 92 B · SHA-256 be517c8a07b6… | 5 hours ago Executable or active-content file changed within the last 24 hours4 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h - Executable or active-content file changed in Media uploads
recent.upload_executable - PHP code marker detected in a recently changed upload
recent.upload_embedded_php
| Critical100/100High confidence | phtml
text/x-php
Permissions 0770 | 2026-09-24 12:51:19 | |
| wp-content/uploads/2026/web_shell.phpMedia uploads · 300 B · SHA-256 47da41221ef6… | 5 hours ago Executable or active-content file changed within the last 24 hours4 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h - Executable or active-content file changed in Media uploads
recent.upload_executable - PHP code marker detected in a recently changed upload
recent.upload_embedded_php
| Critical100/100High confidence | php
text/x-php
Permissions 0770 | 2026-09-24 12:51:19 | |
| database_archive.sql.bakWordPress root · 125 B · SHA-256 40b8e0f0bea1… | 5 hours ago File modification time is within the selected monitoring window1 matched signal- File modification time is within the selected monitoring window
recent.mtime
| Info0/100Low confidence | bak
text/plain
Permissions 0770 | 2026-09-24 12:51:18 | |
| mysql_backup.sqlWordPress root · 457 B · SHA-256 61d39d19f54a… | 5 hours ago File modification time is within the selected monitoring window1 matched signal- File modification time is within the selected monitoring window
recent.mtime
| Info0/100Low confidence | sql
text/plain
Permissions 0770 | 2026-09-24 12:51:18 | |
| private-demo.keyWordPress root · 110 B · SHA-256 49ef4e569c95… | 5 hours ago File modification time is within the selected monitoring window1 matched signal- File modification time is within the selected monitoring window
recent.mtime
| Info0/100Low confidence | key
text/plain
Permissions 0770 | 2026-09-24 12:51:18 | |
| wp-content/debug.logWordPress installation · 99 B · SHA-256 3185012f2485… | 5 hours ago File modification time is within the selected monitoring window1 matched signal- File modification time is within the selected monitoring window
recent.mtime
| Info0/100Low confidence | log
text/plain
Permissions 0770 | 2026-09-24 12:51:18 | |
| wp-content/themes/credentials-demo.ymlThemes · 137 B · SHA-256 f5ce8c94761b… | 5 hours ago File modification time is within the selected monitoring window1 matched signal- File modification time is within the selected monitoring window
recent.mtime
| Info0/100Low confidence | yml
text/plain
Permissions 0770 | 2026-09-24 12:51:18 | |
| wp-content/logs/index.phpWordPress installation · 28 B · SHA-256 bd48c24ce450… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0644 | 2026-09-24 10:50:20 | |
| wp-content/plugins/wpauditor-pro/CHANGELOG.txtPlugins · 4 KB · SHA-256 fc83954a35b1… | 7 hours ago File modification time is within the selected monitoring window1 matched signal- File modification time is within the selected monitoring window
recent.mtime
| Info0/100Low confidence | txt
text/plain
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/change-login-url.phpPlugins · 13 KB · SHA-256 995d44829233… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/guard.phpPlugins · 865 B · SHA-256 dd32b6bd7f1a… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/index.phpPlugins · 28 B · SHA-256 bd48c24ce450… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/notification.phpPlugins · 12 KB · SHA-256 e74c14705231… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-active-defense.phpPlugins · 33 KB · SHA-256 8d7e971e5b6e… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-ai-analyst.phpPlugins · 12 KB · SHA-256 da214d36e386… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-api-access-control.phpPlugins · 7 KB · SHA-256 5ecd6c7429c4… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-backup.phpPlugins · 53 KB · SHA-256 cad3e423aa37… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-core-integrity.phpPlugins · 31 KB · SHA-256 7022a63c9998… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-dashboard.phpPlugins · 99 KB · SHA-256 553fa3891904… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-disable-restapi.phpPlugins · 158 B · SHA-256 09e145f0cf80… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-disable-xmlrpc.phpPlugins · 158 B · SHA-256 09e145f0cf80… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-file-forensics.phpPlugins · 25 KB · SHA-256 94150d0f2170… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-global-rate-limit.phpPlugins · 15 KB · SHA-256 f27bd877dbfc… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-ip-blocklist.phpPlugins · 37 KB · SHA-256 10dc371fc3cd… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-license.phpPlugins · 42 KB · SHA-256 80d873d26287… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-login-protection.phpPlugins · 18 KB · SHA-256 ea6270419edd… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-monitoring.phpPlugins · 29 KB · SHA-256 5794b55e3058… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-password-policy.phpPlugins · 17 KB · SHA-256 7aed5ffd0177… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-quarantine-manager.phpPlugins · 14 KB · SHA-256 905eee96fe31… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-scan.phpPlugins · 2 KB · SHA-256 1d0729e379ed… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-security-events.phpPlugins · 273 B · SHA-256 574af9348d66… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-sensitive.phpPlugins · 183 B · SHA-256 53cf717ec68b… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-settings.phpPlugins · 52 KB · SHA-256 38c1965c996b… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-suspicious.phpPlugins · 183 B · SHA-256 eb97425260a0… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-threat-simulator.phpPlugins · 17 KB · SHA-256 37a343402f9c… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/page-timeline.phpPlugins · 58 KB · SHA-256 0cfb616c25b6… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/theme.phpPlugins · 6 KB · SHA-256 901f0e4017d7… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/admin/upsell.phpPlugins · 7 KB · SHA-256 3c661334b145… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/ai/ajax-handlers.phpPlugins · 9 KB · SHA-256 e8d8db9cf80a… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
| wp-content/plugins/wpauditor-pro/includes/ai/context-builder.phpPlugins · 11 KB · SHA-256 a93d78bf40f3… | 7 hours ago Executable or active-content file changed within the last 24 hours2 matched signals- File modification time is within the selected monitoring window
recent.mtime - Executable or active-content file changed within the last 24 hours
recent.executable_24h
| Info15/100Low confidence | php
text/x-php
Permissions 0664 | 2026-09-24 10:50:12 | |
