=== BlogSafe Scanner === Contributors: blogsafe.org Donate link: https://www.blogsafe.org Tags: malware, scanner, checksum Requires at least: 5.0.0 Tested up to: 5.6.0 Stable tag: 1.1.0 License: GPLv2 or later License URI: http://www.gnu.org/licenses/gpl-2.0.html BlogSafe Scanner is a lightweight file scanner designed to notify you when any files are modified or uploaded to your server. == Description == BlogSafe Scanner is a lightweight file scanner designed to notify you when any files are modified or uploaded to your server. There are literally hundreds of things that a hacker can do with your website that makes it an attractive target. In almost every single case of website hacking the perpetrator needs to upload and/or make changes to the files on your website in order to make use of it. By detecting new files and changes to existing files on your web server and by making you aware of those changes, BlogSafe Scanner is a solid last line of defense that alerts you to these intrusions. It's features include: * Creates a checksum of each file on your web server and compares them to official WordPress checksums. * * Detects new and modified files on your web server. * Optionally ignore files that are changed often. * Optionally checks plugins and themes against the U.S. NIST National Vulnerability Database for known issues. * * Optionally hecks plugins and themes for last known updates and alerts you when they haven't been updated in over 12 months. * * Sends e-mail alert to the server admin when it's been deactivated. * Works with WP Multi-site (Activate on parent site only). * Sends e-mail alearts when new or modified files are detected (Plus version). * Scheduling of automatic scans (Plus version). Notes regarding 3rd party services: * BlogSafe Scanner directly contacts various WordPress API's for checksum verification. During this contact the following information may be sent: a. Plugin name and version. b. Theme name and version. c. WordPress version. * BlogSafe.org monitors and mirrors a portion of the NIST National Vulnerability Database for vulnerabilities related to WordPress, plugins and themes. When opting-in, BlogSafe Scanner will poll the BlogSafe.org API for these potential vulnerabilities. At no time will the plugin contact the NIST database directly. BlogSafe.org also maintains a database of known WordPress themes and plugins. This database is generated directly from the WordPress repository and verified via the WordPress API. When opting-in, BlogSafe scanner will poll the BlogSafe.org API for this data. At no time does BlogSafe Scanner directly contact the WordPress SVN. During this opt-in contact the following information may be sent: a. A list of plugins and themes found on your website along with their versions. * The BlogSafe.org privacy policy can be found here: https://blogsafe.org/privacy-policy/ * The WordPress Privacy Policy can be found here: https://wordpress.org/about/privacy/ == Installation == 1. Unzip and upload the entire directory to the `/wp-content/plugins/` directory 2. Activate the plugin through the 'Plugins' menu in WordPress == Screenshots == == Changelog == = 1.1.0 = * Added language files for en * Updated scan routines to produce a report instead of static output. * Removing files from the ignore list now triggers a full scan requirement. = 1.0.3 = * Initial public release. == Upgrade Notice ==