Version 1.7.0

One-click cleanup for hacked sites

Clean up a compromised site from your ErrorVault dashboard. Actions are queued on the site's Security page and run on the site's next check-in (within 5 minutes), followed by an automatic rescan.

Added

• Cleanup actions:
  • Quarantine flagged files or folders. They're kept as non-executable .bin/.zip files outside the web root where possible, and can be restored.
  • Remove a malicious or unknown plugin (deactivate + quarantine).
  • Reinstall a modified plugin from WordPress.org (same version).
  • Update or reinstall WordPress core from WordPress.org.
  • Delete a rogue administrator, reassigning their content.
  • Rotate the wp-config.php security keys/salts, with a restorable backup.
  • Log out all users.
  • Remove hijacked active_plugins entries.
• Database checks in the security scan: obfuscated scripts injected into posts or options, active_plugins entries loading files from outside the plugins folder, and WP-Cron events carrying code.

Safety

• The site enforces its own rules: wp-config.php, genuine core files, the active theme, top-level folders, ErrorVault itself and anything outside the install are never quarantined, and the last administrator can't be deleted.
• Nothing sent by ErrorVault is ever written to disk or run as code.
• Turn remote cleanup off under Settings → ErrorVault → Remote Cleanup, or with define('ERRORVAULT_DISABLE_REMOTE_ACTIONS', true);.

Fixed

• The rescan after a core update now reads the core version from disk, so it no longer reports false "modified core files".

Installation

Update via the WordPress admin "Plugins → Updates" screen, or download errorvault-wordpress.zip below and upload manually.