GoBuildWP 1.19.2

• New: GoBuildWP Cloud can send the site extra security scan rules and the fingerprints of confirmed malware files. The site accepts them only from a request signed by GoBuildWP Cloud, checks every rule and drops any it cannot use; the built-in rules always run. A file that matches a known malware fingerprint is reported as critical.
• Changed: the file scan now reads PHP files in cache, upgrade and backup folders (UpdraftPlus, All-in-One WP Migration, BackWPup), which it used to skip, and the deep scan checks every folder in wp-content, not just the top level.
• Changed: the database scan reports a run of linked comments held for moderation (25 or more in the last 7 days) as comment spam. Counts only; the comments are not returned.

Security scans read PHP in cache and backup folders, catch comment spam waiting for moderation, and can use rules and malware fingerprints sent by GoBuildWP Cloud.