Home › Forums › Support Forum › New malicious files and infection that the program cannot detect › Reply To: New malicious files and infection that the program cannot detect
November 1, 2025 at 1:08 am
#162332
I had a very similar intrusion where the scanner did not detect a hidden user in the database.
I only became aware when my main theme updated, removing the malicious code, and the number of admin users showing in the WordPress admin panel became correct.
In addition to trying to detect the malicious code, could you add a check for ‘hidden’ users to the plugin? Perhaps use a number of different methods to check the database for admins and report any difference in the count results.
