How to stop WordPress plugins disappearing from the administration page

Problem

You install, update, or delete a WordPress plugin, and then some or all of your plugins disappear from the administration page.

Cause

If this problem appears, your WordPress website has probably been compromised. This does not mean, however, that a new plugin caused the compromise. Every time a plugin is changed, WordPress performs a basic check on all installed plugins, removing any that have code injected above their metadata.

The fact that WordPress runs the code found in each active plugin’s main file makes it a target for several attacks for WordPress themes and plugins. When code is injected into a plugin’s main file on a hacked site, the plugin executes and frequently injects code into any other PHP files it finds. Upon execution, these compromised files search for more files to compromise. In a flash, each PHP

Many code injection-related compromises use WordPress to send spam, advertise a hacker group, or even perform a Distributed Denial of Service (DDoS) attack. The malicious code is executed at least once on every site page view, which means the hack performs its task at least once per site visit. So if the purpose of the hack is to send spam from your account (for example), e-mail messages are sent out from your site every time a user visits a page.

Removal of files with missing metadata is not regarded by WordPress as a security benefit. If that were the case, it would regularly confirm this information and send you a helpful notification explaining the issue. This is merely a byproduct of WordPress requiring a specific set of data to be input in a remark at the beginning of any plugin. Links to the plugin website, author information, a synopsis of the plugin, the plugin name, and version information are all included in this metadata.

Using Lua on Hostvento Hosting servers

How to keep SSH connections alive