Increase your WordPress security by deleting old core files that exist in the filesystem before hackers exploit them for attacks.
As of April 2026, Old Core Files is a WordPress tool plugin with 200 active installations and a 5/5 rating from 3 reviews. It has been downloaded 25K+ times in total. Requires WordPress 3.0+ and PHP 5.2.4+. Available on WordPress.org since 2013. Last updated 6 years ago — may have compatibility concerns. Top alternative: Transients Manager.
Secure your WordPress site by checking and removing obsolete core files.
When core is being upgraded, usually some files are no longer used by WordPress, and they are set for removal.
On some occasions, PHP has no permissions to delete these files, and they stay on the server. Old Core Files alerts you to remove old files before hackers attempt to exploit them for attacks.
It’s recommended to delete unused themes and plugins as hackers could exploit them for attacks. Same logic applies for deprecated code files.
| WordPress | 3.0+ requiredTested up to 5.2.24 |
| PHP | 5.2.4+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.