Scans WordPress plugin, theme, and core directories for malicious code injections.
As of April 2026, Code Scanner is a WordPress code plugin with 10 active installations and a 0/5 rating0. It has been downloaded 1.8K+ times in total. Requires WordPress 4.0+ and PHP 5.6+. Available on WordPress.org since 2018. Last updated 7 years ago — may have compatibility concerns. Top alternative: WPCode – Insert Headers and Footers +….
This plugin was born because my own WordPress site got hacked, and I needed a quick way to track down which files have had code injected into them.
It will scan for the key words I found to be common in WordPress code injection situations.
| WordPress | 4.0+ requiredTested up to 5.1.0 |
| PHP | 5.6+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.