Compare WordPress files with known copies and investigate differences before deciding what to restore.
Available in the current release. Plugin and theme checks, diffs and snapshots were added in 3.0.
This illustrates the monitoring workflow, including plugin and theme comparisons.
wp-includes/version.php · illustrative diff
Compare with recent maintenance and preserve evidence.
Restoring this file does not establish that the whole site is clean.
Use a matching official WordPress.org package or a snapshot made from reviewed, trusted files.
The scan identifies differences between the current files and the available baseline.
Review file details and available diffs, taking recent maintenance and customisations into account.
Restore a supported modified original when appropriate. Extra files and unexplained changes need further review.
A legitimate update and an unwanted modification can both change a file. Without a comparison, it is difficult to know what changed or where to start investigating.
FluentAuth compares supported files with matching official packages or a reviewed snapshot. Differences give you evidence to inspect. Restoring a modified official file can remove that particular change, but a comparison does not establish the cause or certify a site as clean.
Spend less time searching for changes and more time understanding the ones that matter.
Get FluentAuth →Available in the current release. Plugin and theme checks, diffs and snapshots were added in 3.0.
Follow the setup guide →
For custom extensions without an official comparison package, snapshots provide a baseline. Make that baseline from files you have already reviewed and trust.
A maintainer can compare a scan with recent maintenance work. An unexplained change warrants closer inspection, especially when it appears alongside unfamiliar account activity.
No. A modified official file can have an original to restore. A new or extra file has no original counterpart. Custom packages also need a suitable baseline. File comparison detects differences; it does not determine that every difference is malicious or guarantee malware removal.
Start with core checks, then explore the plugin and theme comparisons and the baseline snapshots.