What are the ways to detect malicious code on Wordpress?

Question

WordPress

Somewhere the malware sits and generates its external link on the main page. I did not find any traces of it in the database and in the files. It is generated 100% not through javascript. Revising all files manually is too long and hardly anyone does it at all. How can you catch it, where is it generated and how?

Answer 1

Scan the site by Ai-Bolit

Answer 2

Copy to your computer and run DrWeb.
Find the same version of WP and check files that are outside the template.

Answer 3

All you need to do is view the theme files, because. a clean version of the engine and plugins can be downloaded from the official. from the site.
It is not uncommon for malicious code to be in the mysql database, so ai-bolit does not detect it.

Answer 4

Install the Wordfence plugin and scan. He will do everything