Backdoors in nulled plugins/themes

[aluknot]

Hi Babak, just want to know something... how we know that the plugins uploaded here don't have backdoors? I am not saying that this is your intention but you check that? or should we be cautious? Thanks.

 

[Babak]

Hi Babak, just want to know something... how we know that the plugins uploaded here don't have backdoors? I am not saying that this is your intention but you check that? or should we be cautious? Thanks.

yes you right there is no guaranty, but i share my untouched files
about other files, i trust the source
dont worry

 

[olshoper]

you can scan using wordfence plugin after install anyplugin/themes

 

[dangerbear]

you can scan using wordfence plugin after install anyplugin/themes

This is exactly what I do.. Also just a headsup.. what I usually do is test out the nulled version of the theme..and if it matches my requirement purchase it.. if you are making money out of your site its better u purchase the theme once u settle on it that it works for you.

 

[dhruvjha]

After downloading any theme or plugin from any third party website, scan on virustotal.com. Here you will have enough information, whether there is any backdoor script or malware. Make sure to scan theme and plugin zip files individually for better results. After that you can check through wordfence for malware or backdoor. Also scan through TAC plugin for any backlinks.

 

[firefoxbird]

thanks for info

 

[DarKZeroS]

you can check with virustotal.com and wordfence also you can also download the same plugin from other nulled websites and with winmerge compare if all files are equals, this way is the most effective and safe

sometimes it is the same creator of the plugin that creates the backdoor ... it has happened to me on several occasions, that is why it is important that the plugins are codecayon they verify that they do not have malicious code inside the plugin