Encountering the 'This site contains harmful programs' warning on your WordPress site? This Google alert usually signals a security breach, marking your site as unsafe for visitors. Even after addressing the hack, the notice may linger. In this guide, drawn from our extensive experience securing WordPress sites, we'll walk you through proven steps to resolve it completely.
The primary cause is a hack where malware infects your site, potentially spreading to visitors or other sites. Google detects suspicious code—like malware or Trojans—and issues the warning to protect users.
Low-quality ad networks can also trigger it by serving ads linked to malicious sites. To detect issues, scan your WordPress site for malicious code using our detailed tutorial. Alternatively, use Google's Safe Browsing tool by visiting:
https://www.google.com/safebrowsing/diagnostic?site=YourDomain.com
With causes identified, let's fix the problem.
Subscribe to WPBeginner for more. If you prefer text instructions, read on.
Start with a full backup of your WordPress site—you'll thank yourself later.
Cleaning malware is complex; backdoors often let threats return. A backdoor bypasses authentication for undetected server access, hiding in weak passwords, loose permissions, or disguised files. See our in-depth guide on finding and fixing backdoors in hacked WordPress sites.
After eliminating backdoors, scan all files and your database thoroughly for remnants.
This process is time-intensive, which is why we rely on Sucuri for all our sites.
Sucuri offers 24/7 WordPress monitoring, blocks attacks, and removes malware. At $199/year, it's a steal compared to freelance experts charging $250+/hour.
Skip the hassle—sign up for Sucuri today.
Note: Using our link earns us a small commission, but we only endorse tools we use ourselves and trust for our readers.
Once clean, submit for review via Google Search Console (formerly Webmaster Tools). If not verified, follow our guide to add your site.
Navigate to the Security & Manual Actions > Security Issues section. It lists detected problems with cleanup guidance. After fixes, check the box and request review.
Subscribe to WPBeginner
No issues listed? Report a false positive using this form.
This should resolve your 'harmful programs' issue. Also check our 25 common WordPress errors to avoid.
Like this? Subscribe to our YouTube channel for tutorials, and follow us on Twitter and Facebook.
