sminozzi

Hello Tibbie,

Thank you!

Now the plugin removes the file after completing the installation or update, saving space.

Best regards,
Bill, PLugin Develper.

If I understood correctly, your client’s site has more than 1020 must use plugins, right?Well, as an emergency measure, I uploaded a new version that removes the malware scan while I properly study how to include a management interface for that in the plugin, which requires more time.
I hope this solves your problem, please let me know.

Hi,
I haven’t heard back from you, but I would like to further analyze the message you posted: ‘Sorry, you are not allowed to access this page.’

Please note that while your post title was ‘Site Access Blocked’, the actual message you received has a very specific meaning. Being ‘blocked out of the site’ is one situation, but this message indicates that WordPress recognizes you are logged in but is not allowing access to a specific area or function.

To test this, please try clicking on other items in the left-hand sidebar menu (such as ‘Dashboard’ or ‘Posts’) and see if the system allows you to navigate or if the error persists. This will help us identify if the issue affects the entire admin area or just an isolated link.
Regards,

Bill, Plugin developer

This file contains no malware signatures. (/includes/catch-malware/class_bill_catch_malware.php)
But since it’s hard to do a deeper check (especially because some of the info seems incorrect), I can’t really dig any further than what I’ve already suggested.
To be clear, my concern isn’t with you, but with the data you received, as some of the information appears to be inaccurate.
So you don’t waste more time, I’d recommend deactivating our plugin and using the standard WordPress one—it’s very good. I’ll get back to you if I find out anything else in the future.
If you come up with any other ideas, I’m here to listen.
Thank you again!

As I explained yesterday, if you click the “ignore” button on the security alert screen, the button disappears.
It just takes one click.

The current situation regarding cyber threats is very serious. And the truth is, we are worrying about this. When many start to worry, as you said, rest assured that a solution will emerge in due time.

You have every right to think differently. However, since we gave advance warning and you can remove the button with just one click, I don’t think the one-star review is warranted.
Note that you wrote: “…most notably a massive Site Health module with a big red warning that cannot be disabled…“
It is not true.

Hi,

Thank you for letting me know. I just ran tests with Wordfence and it did not flag it as malware on our site. I will study that more, but in the meantime, please remove and install our plugin again to be sure it is clean. Try installing our free AntiHacker plugin and run a complete scan on your site, just in case. Then, please let me know the results.
https://ww.wp.xz.cn/plugins/antihacker/

When our system catches malware, it specifies its name, and we have a table on our website, accessible to everyone, that details the malware’s characteristics. This helps us analyze it. However, other systems only state that they suspect malware, which complicates our work.

Our system has filters to avoid flagging Wordfence files. If we remove these filters, it also flags Wordfence as suspicious, but we filter that out because we trust them and to avoid bothering our users.

Regards,
Bill, Plugin developer

• This reply was modified 4 months, 3 weeks ago by sminozzi.

Grazie mille! Sono italiano anch’io, è um piacere.
Thank you for helping us make the web a safer place.

Hi Alex,
Our WordPress plugin page includes a section titled “Advanced Site Health” which explains this functionality and provides a link to our Terms of Service for full transparency.

It seems there was a misunderstanding before leaving this review, so here is why our plugin operates this way:

Cyberattacks are 450% more effective The security landscape has reached a turning point driven by AI. According to the Microsoft Digital Defense Report 2025, AI makes sophisticated attacks 450% more effective than traditional methods. We are currently seeing state-sponsored cyberwarfare targeting not just governments, but all websites.

2 million attacks every second Roughly 30% of internet traffic consists of bots, and 2.5% is purely malicious. According to Cloudflare, that translates to nearly 2 million attacks every second.

Our plugin extends WordPress’s native Site Health feature—a practice encouraged by the WordPress Core handbook—to ensure total site integrity. A plugin is like a gear in a machine; if the machine is failing, our plugin cannot function correctly, which leads to unnecessary support requests and overhead.

Finally, if you simply click the “Ignore” button, the plugin will silence the warnings and the button will disappear instantly.

We hope this clarifies our approach and that you might consider updating your review based on these facts.

Happy new Year!

Bill, Plugin developer.