What causes malware on my wordpress site?

[ad_1]

I created a wordpress (WooCommerce) theme. I also added 2 plugins:

\- WP Fix It for order testing (will be removed)

\- WP Order Delivery Date (for picking order date)

I think my plugins cause malware. I am not sure though if my theme could cause malware.

Now I’ve only used PHP for picking the order delivery date and I can remove my WP Order Delivery Date plugin. Although I am not sure if my WordPress theme itself can cause malware on my wordpress.

My question is, what are causes for malware on my wordpress site? Could it be the plugins, my theme itself or something totally different?

[ad_2]