PHP & WordPress Security
Tools for plugin inspection, theme malware, and legacy PHP review.
Spotlight
DecodePHP
onlinedecodephp.io
Professional IonCube decoder supporting versions 10 through 15 with PHP 7.1 to 8.4. Upload encrypted PHP files and get readable source code back.
Tools
UnPHP
Automated PHP decoder for nested eval/base64 obfuscation. Handles 80+ layers of encoding automatically.
Free
online
PHP Sandbox
Test PHP code across 5 versions simultaneously. From PHP 4.0 to 8.4, see exactly how your code behaves.
Free
online
WPScan
The WordPress vulnerability database. 70,000+ CVEs for core, plugins, and themes—with CLI scanner and API.
Paid
cli
Sucuri SiteCheck
Free remote website malware scanner. Checks blacklists, detects infections, and identifies outdated software.
Free
online
Shield MAL{ai}
AI-powered PHP malware detection. Learns from new samples to catch threats signatures miss.
Free
online