Detecting Malicious Scripts in your Wordpress theme

Nowadays, the number of users using wordpress is rapidly increasing and almost all the sites i've visited are using wordpress. With all the resources you can gather in the internet and all the free themes that are available for download, have you ever thought that one of those themes/plugins you have downloaded is infected with viruses or unwanted scripts? I recently started using wordpress a few months back, it never occurred to me that some wordpress themes/plugins are infected with malware scripts. As a beginner with wordpress, things like viruses and malware scripts embedded in the themes won't really come to mind as your only focusing on building and customizing your theme. As i was browsing the net, i stumble on these two sites that offer a free scan to check if your theme is infected with malicious scripts embedded in the theme.

1. http://www.unmaskparasites.com - Unmask Parasites is a simple online web site security service that helps reveal _hidden_illicit content (parasites) that hackers insert into benign web pages using various security holes.
2. http://sitecheck.sucuri.net/scanner - Sucuri SiteCheck scanner is an online scanner that scans the website for known malware, blacklisting status, website errors, and out-of-date software.

I've tried both online scanners and found out that the last theme i used was infected. Also, there's a wordpress plugin that you can use to scan your website for malicious codes. You can download it here: Exploit Scanner - Search the files and database of your WordPress install for signs that may indicate that it has fallen victim to malicious hackers. I hope this post will help any users using wordpress and stay clear from security vulnerability of the themes and plugins that are running on your website.