WP Clinic
Log in Sign up

SECURITY FINDING

Obfuscated JavaScript injected on the home page

What it is

The home page contains obfuscated JavaScript (encoded/decoded at runtime) — a technique legitimate code rarely needs, and a common way malware hides what it actually does from a casual look at the page source.

How to fix it

Review the page's source for a script you don't recognize. If you're not sure, install the WordPress Plugin and run AI Repair to clean it safely (with an automatic backup and rollback).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.