JAZ-X Code Inspection
JAZ-X Code Inspection is a read-only static inspection tool. It highlights code capabilities that deserve review, including dynamic code execution, obfuscation, filesystem writes, direct database changes, outbound requests, REST routes, scheduled tasks, and user privilege changes. It also lists lite
JAZ-X Code Inspection is a read-only static inspection tool. It highlights code capabilities that deserve review, including dynamic code execution, obfuscation, filesystem writes, direct database changes, outbound requests, REST routes, scheduled tasks, and user privilege changes.
It also lists literal external domains referenced by the scanned code.
Important: a finding is not proof of malware, and a clean report is not a guarantee of safety. Legitimate plugins often need powerful WordPress capabilities. JAZ-X Code Inspection helps administrators ask better questions before trusting code.
JAZ-X Code Inspection does not send scan data to an external service and does not retain uploaded ZIP files.
JAZ-X Code Inspection Pro
The free edition is fully usable for on-demand static inspection. If you need continuous monitoring, baselines, scan history, change alerts, and other advanced workflow features, an optional Pro edition is available from JAZ-X Innovation: https://store.jazx.online/product/code-x-ray-pro-wordpress-plugin-security-scanner/
- 01Upload the plugin folder to /wp-content/plugins/ or install the ZIP in WordPress.
- 02Activate JAZ-X Code Inspection.
- 03Open Tools > JAZ-X Code Inspection.
- 04Select an installed plugin or upload a plugin ZIP for inspection.
Does a high score mean a plugin is malicious?
No. The score measures potentially powerful capabilities detected by static signatures. Review the identified code and the plugin’s documentation before making a trust decision.
