lots of false positives, but excellent tool

Whenever WP puts out a new version it would appear as though this plug-in needs to update the hashes, which can sometimes take a while. That being said, when the hashes are up to date it’s fantastic at pointing out vulnerabilities. It seems like false positives are pretty common, but once you get the hang of it it’s very helpful to recognize problems. Our blog has been hacked a few times in the past and this tool really helped to clean it up.