Sorry, forgot to mention, the infection happened while the plugin was dancing aloud shouting everything is good….
Health Check & Troubleshooting – the name itself is misleading
The Tools section allows you to check that WordPress files have not been tampered with, that emails can be sent, and if your plugins are compatible with any PHP version updates in the future…from the description of the plugin… but in reality the plugin has an open door policy to tampering…
thanks james, Its good that it is made by the community but.
1. I saw that this plugin like was promoted as a solution for any problem with wordpress, which is evidently fake marketing.
2. I had a several worpress installations which had hundreds of infections (it was running slow, redirecting to porn websites, advertisements etc…etc). still this plugin said everything was alright and there is nothing wrong. But technically the issue was the wordpress core files. So it took some time to understand that this plugin was giving me a fake sense of goodness.
If a wordpress community developed plugin is not that reliable, shows that fake sense of security, it means there is something wrong.
