PHP & WordPress Security
Tools for plugin inspection, theme malware, and legacy PHP review.
Run it in your browser
Before you hand your sample to a third party, see how far the local tools get.
DecodePHP
onlinedecodephp.io
Professional IonCube decoder supporting versions 10 through 15 with PHP 7.1 to 8.4. Upload encrypted PHP files and get readable source code back.
Tools
UnPHP
Automated PHP decoder for nested eval/base64 obfuscation. Handles 80+ layers of encoding automatically.
PHP Sandbox
Test PHP code across 5 versions simultaneously. From PHP 4.0 to 8.4, see exactly how your code behaves.
WPScan
The WordPress vulnerability database. 70,000+ CVEs for core, plugins, and themes—with CLI scanner and API.
Sucuri SiteCheck
Free remote website malware scanner. Checks blacklists, detects infections, and identifies outdated software.
Shield MAL{ai}
AI-powered PHP malware detection. Learns from new samples to catch threats signatures miss.