BlogSafe.org

BlogSafe Scanner is a lightweight file scanner designed to notify you when any files are modified or uploaded to your server.
It’s features include:
<ul>
<li>Creates a checksum of each file on your web server and compares them to official WordPress checksums. *1</li>
<li>Detects new and modified files on your web server.</li>
<li>Optionally ignore files that are changed often.</li>
<li>Optionally checks plugins and themes against the U.S. NIST National Vulnerability Database for known issues. *2</li>
<li>Optionally hecks plugins and themes for last known updates and alerts you when they haven’t been updated in over 12 months. *2</li>
<li>Sends e-mail alert to the server admin when it’s been deactivated.</li>
<li>Works with WP Multi-site (Activate on parent site only).</li>
<li>Sends e-mail alearts when new or modified files are detected (Plus version).</li>
<li>Scheduling of automatic scans (Plus version).</li>
</ul>
Notes regarding 3rd party services: 
1. BlogSafe Scanner directly contacts various WordPress API’s for checksum verification. 
 During this contact the following information may be sent: 
 a. Plugin name and version. 
 b. Theme name and version. 
 c. WordPress version.
<pre><code>The WordPress Privacy Policy can be found here: [WordPress](https://wordpress.org/about/privacy/ "WordPress Privacy")
</code></pre>
<ol>
<li>
BlogSafe.org monitors and mirrors a portion of the NIST National Vulnerability Database for vulnerabilities related to WordPress, plugins and themes. When opting-in, BlogSafe Scanner will poll the BlogSafe.org API for these potential vulnerabilities. At no time will the plugin contact the NIST database directly. BlogSafe.org also maintains a database of known WordPress themes and plugins. This database is generated directly from the WordPress repository and verified via the WordPress API. When opting-in, BlogSafe scanner will poll the BlogSafe.org API for this data. At no time does BlogSafe Scanner directly contact the WordPress SVN. 
 During this opt-in contact the following information may be sent: 
 a. A list of plugins and themes found on your website along with their versions.
The BlogSafe.org privacy policy can be found here: [BlogSafe] (https://blogsafe.org/privacy-policy/ “BlogSafe Privacy”)
</li>
</ol>

BlogSafe Scanner

BlogSafe Scanner is a lightweight file scanner designed to notify you when any files are…

kamranmayo

Checks the current WordPress installation for file tampering using the official WordPress.org checksum API. Features:
<ul>
<li>Admin page with modern Bootstrap UI</li>
<li>Modal with progress and results</li>
<li>Dashboard widget for latest scan summary</li>
<li>Email alerts when discrepancies are found</li>
<li>Option to reinstall WordPress core</li>
</ul>
<h3>External services</h3>
This plugin uses the official WordPress Checksums API to compare your WordPress core files against known-good hashes. 
No user data is transmitted. Only your site’s WordPress version and locale are sent to the API endpoint at https://api.wordpress.org/core/checksums/.

Core Checksum Verifier

Verifies the integrity of your WordPress core files with official checksums. Displays modified/missing files.

BlogSafe Scanner vs Core Checksum Verifier