Lumiverse Security Watchdog Lite is a lightweight yet powerful WordPress security plugin designed to detect early signs of compromise and reduce common attack surfaces.\nIt runs automated background scans and alerts you when something suspicious is detected.<\/p>\n\n\n\n
\u2714 Malware signatures (JS & PHP)<\/strong>\nScans files for known malware patterns including injectors, obfuscated scripts, and common webshell families.<\/p>\n\n \u2714 Changed JavaScript files<\/strong>\nDetects modified \u2714 Plugins (new, deleted, suspicious)<\/strong>\n- Detects newly installed or removed plugins \u2714 Core integrity checks<\/strong>\n- Flags important WordPress core files modified recently \u2714 Uploads directory scanning<\/strong>\n- Detects PHP files inside uploads (common malware location) \u2714 Admin user monitoring<\/strong>\n- Detects new admin accounts \u2714 Database backdoor indicators<\/strong>\n- Detects suspicious Reduce attack surface with one-click protections:<\/p>\n\n \u2714 Block XML-RPC \u2714 Email notifications when threats are detected \u2714 Fast Mode: scan only recently modified files This plugin does NOT automatically clean malware<\/strong>.<\/p>\n\n It is a detection and monitoring tool<\/strong> that helps you:\n- detect compromises early Or manually:<\/p>\n\n No. It detects suspicious activity and helps you respond quickly.<\/p><\/dd>\n Every 24 hours via WP-Cron (can be changed in settings).<\/p><\/dd>\n No. Only when suspicious findings are detected.<\/p><\/dd>\n Yes. It is designed to complement other tools.<\/p><\/dd>\n No. It is lightweight and optimized. Fast mode is available for large sites.<\/p><\/dd>\n It prevents attackers from resetting administrator passwords through the default WordPress flow.<\/p>\n\n<\/dd>\n\n<\/dl>\n\n\n Major update:\n- Added PHP malware scanning (plugins, themes, uploads)\n- Added suspicious plugin detection (including random names)\n- Added uploads executable detection\n- Added core integrity checks\n- Added admin hygiene and security alerts\n- Added advanced hardening options\n- Improved scanning performance (Fast Mode)\n- Improved UI with new dashboard layout<\/p>\n\n New patterns Initial WordPress.org release<\/p>","raw_excerpt":"Lightweight WordPress security scanner and hardening tool. Detects malware, suspicious plugins, admin changes, and protects your site with built-in se …","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/273886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=273886"}],"author":[{"embeddable":true,"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/bestseogr"}],"wp:attachment":[{"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=273886"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=273886"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=273886"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=273886"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=273886"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/ru.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=273886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}.js<\/code> files and analyzes them for suspicious behavior.<\/p>\n\n
\n- Flags suspicious plugin names (e.g. random\/hash-based folders)
\n- Detects known fake plugin families (WP Default, Cache Engine, Slick Popup, etc.)<\/p>\n\n
\n- Scans recent core PHP files for suspicious patterns<\/p>\n\n
\n- Detects executable files (php, phtml, phar, etc.)<\/p>\n\n
\n- Flags suspicious admin usernames or invalid emails<\/p>\n\n_pre_user_id<\/code> entries used by hidden admin exploits<\/p>\n\n\n\nSecurity Hardening Features<\/h4>\n\n
\n\u2714 Disable application passwords
\n\u2714 Disable file editing (wp-admin editor)
\n\u2714 Disable plugin\/theme installation & updates (optional)
\n\u2714 Disable plugin\/theme deletion
\n\u2714 Hide login error messages
\n\u2714 Limit login attempts (basic brute-force protection)
\n\u2714 Block pingbacks
\n\u2714 Block user enumeration
\n\u2714 Block comments sitewide
\n\u2714 Block password reset for administrators<\/p>\n\n\n\nAlerts & Monitoring<\/h4>\n\n
\n\u2714 Alerts if \u201cAnyone can register\u201d is enabled
\n\u2714 Optional auto-fix to disable user registration
\n\u2714 Admin hygiene warnings (e.g. weak usernames)<\/p>\n\n\n\nPerformance Focused<\/h4>\n\n
\n\u2714 Lightweight: no heavy server load
\n\u2714 Designed to work alongside plugins like Wordfence<\/p>\n\n\n\nImportant<\/h4>\n\n
\n- understand what changed
\n- take action before damage spreads<\/p>\n\n\n\n
\n
\/wp-content\/plugins\/<\/code> <\/li>\n\n
Does this plugin remove malware?<\/h3><\/dt>\n
How often does the scan run?<\/h3><\/dt>\n
Will it send emails on every scan?<\/h3><\/dt>\n
Can I use this with Wordfence or other security plugins?<\/h3><\/dt>\n
Will it slow down my site?<\/h3><\/dt>\n
What does \u201cBlock admin password reset\u201d do?<\/h3><\/dt>\n
3.0.4<\/h4>\n\n
\n
3.0.3<\/h4>\n\n
\n
3.0.1<\/h4>\n\n
\n
3.0.0<\/h4>\n\n
1.1.4<\/h4>\n\n
\nImproved engine<\/p>\n\n1.1.2<\/h4>\n\n