Skip to content
Mastodon
Books by MD Pabel

Practical WordPress security books for real incidents.

A growing catalog of field guides and focused case studies for investigating, cleaning, recovering, and verifying compromised WordPress websites.

The catalog

Published books

9 titles
WordPress Malware Removal for Developers and Site Owners book cover

Complete field guide

PDF price $19.99

WordPress Malware Removal

for Developers & Site Owners

An end-to-end investigation and recovery method covering diagnosis, files, databases, hosting, redirects, SEO spam, hidden users, payment skimmers, suspensions, blacklists, reinfection, and monitoring.

293 pages 18 chapters 86 screenshots and figures

Best for: Developers, site owners, agencies, and responders who want the complete WordPress malware-removal workflow.

Pay what you want · $19.99 minimum · $19.99 suggested.

Field guide 1 of 8

PDF price $9.99

WordPress Malware Removal Fundamentals

Diagnose, Clean, Recover, Secure, and Deliver the Work Responsibly

A practical foundation for grading evidence, planning a safe cleanup, recovering the site, and handing the work back with clear verification.

154 pages 10 chapters 40,000+ words

Best for: Site owners, freelancers, and developers building a reliable first-response process.

Complete PDF · Purchasing opens soon · Free sample available now.

Field guide 2 of 8

PDF price $4.99

WordPress Redirect Malware Removal

Trace Conditional Redirects Through WordPress, Hosting, Database, CDN, and DNS

Learn how to reproduce conditional redirects, trace their delivery path, remove the responsible code or configuration, and verify every layer.

21 pages 8-layer investigation Conditional delivery

Best for: Responders investigating redirects that appear only for certain visitors, devices, or traffic sources.

Complete PDF · Purchasing opens soon · Free sample available now.

Field guide 3 of 8

PDF price $4.99

WordPress SEO Spam Removal

Remove Hacked Content and Retire Its Remaining URLs from Google

A focused process for finding hacked search content, cleaning its source, handling large URL sets, and retiring the remaining results safely.

19 pages Two-part recovery Large URL patterns

Best for: Site owners and SEO or security professionals responding to hacked pages in search results.

Complete PDF · Purchasing opens soon · Free sample available now.

Field guide 4 of 8

PDF price $5.99

Hidden WordPress Plugins, Themes, and Users

Find Fake Components and Concealed Administrator Access

Reconcile the dashboard, filesystem, database, and account records to uncover fake components and administrator access designed to stay hidden.

30 pages 2 investigations Plugins, themes, and users

Best for: Developers and administrators who suspect concealed plugins, themes, or privileged accounts.

Complete PDF · Purchasing opens soon · Free sample available now.

Field guide 5 of 8

PDF price $6.99

WooCommerce Credit-Card Skimming Malware Removal

Trace Checkout Loaders, Preserve Evidence, and Recover the Payment Path

A payment-path response guide for containing a compromised checkout, preserving evidence, tracing frontend behavior, and verifying recovery.

24 pages 2 checkout cases Payment-path checklist

Best for: WooCommerce operators and responders handling suspicious payment forms, scripts, or checkout behavior.

Complete PDF · Purchasing opens soon · Free sample available now.

Field guide 6 of 8

PDF price $4.99

WordPress Blacklist Removal

Clean the Site, Identify the Warning Owner, and Submit Better Reviews

Understand who issued a warning, complete the underlying remediation, gather proof, and write a concise review request that can be verified.

28 pages 4 field cases Official review contacts

Best for: Site owners and responders recovering from browser, search, hosting, or security-vendor warnings.

Complete PDF · Purchasing opens soon · Free sample available now.

Field guide 7 of 8

PDF price $4.99

Stop WordPress Malware from Coming Back

Find the Writer, Remove Recovery Sources, and Prove the Cleanup Holds

Move beyond repeated file deletion by finding what restores the infection, removing connected access, and monitoring long enough to prove the fix.

20 pages 6 recovery paths Recurring malware

Best for: Developers and agencies facing infections that return after apparently successful cleanups.

Complete PDF · Purchasing opens soon · Free sample available now.

Field guide 8 of 8

PDF price $6.99

SC 4.0.3 Self-Healing WordPress Malware Removal

A Field Case Study of Files, Database Persistence, Memory, and Browser Recovery

A forensic case study mapping a self-healing infection across files, database records, runtime memory, browsers, sibling sites, and access paths.

31 pages 24-site field case Field checklist

Best for: Experienced responders investigating persistent, multi-layer WordPress infections.

Complete PDF · Purchasing opens soon · Free sample available now.

Continue with the public evidence library.

Browse artifact-level reports, privacy-reviewed screenshots, stable indicators, limitations, and remediation context behind the field work.