Malware is malicious code that sneaks onto your website to do harm - redirecting visitors to spam, stealing data, or hijacking your site to attack others. On WordPress, it usually gets in through outdated software.
Also known as: Malicious code, site infection, webshell
In plain English
Malware is hostile software planted on your site without your knowledge. It might redirect your visitors to scam sites, inject hidden spam links that Google penalizes you for, steal form submissions, or turn your server into a tool for attacking other sites.
Why it matters for your business
An infected site doesn't just risk your data - it risks your domain reputation, your search rankings, your customers' trust, and your hosting account (hosts suspend infected sites to protect their other customers). It spreads quietly: many infections run for months before anyone notices.
When you'll run into it
Usually via outdated plugins/themes, nulled (pirated) plugins, compromised admin passwords, or vulnerable hosting. Signs include sudden redirects, Google warnings, unfamiliar admin users, and unexplained slowdowns.
Run into this on your site?
WordPress Care Plans