A significant proportion of website owners are unaware of malware present in their hosting and infecting their websites – and even if they were they wouldn’t know what to look for. An effective WordPress security maintenance check should include a scan for known malware and suspicious files – identify them and suggest a fix – delete, quarantine etc. For persistent malware problems the frequency of scanning should be increased until the source or cause can be identified and treated.