WordPress glossary
Trojanized Core File
A WordPress core file (like wp-blog-header.php or wp-load.php) modified to load attacker code on every request.
Last updated ยท Reviewed by Ali Yasin Jatoi
Core files should match the SHA hashes shipped with the matching WordPress version. A trojanized core file passes a casual review because the filename is legitimate, but contains an extra include() or eval() that bootstraps malware. The only reliable fix is to replace every core file from a clean WordPress download of the same version, then re-scan.
Where this applies on our service