Hi Artem,
Thank you. I did contact SiteGround and they reviewed server logs.
They found no FTP/SSH activity and no server-side cleanup/malware process deleting files. Instead, their access logs show bulk media deletions being initiated inside WordPress admin, with requests like:
/wp-admin/upload.php … action=delete&bulk_action=Apply … media[]=…
So this isn’t SiteGround deleting /wp-content/uploads externally — it’s an application-level delete action being triggered within WP Admin.
Can you please advise what within WoodMart (or included modules/plugins such as theme helpers, optimization, demo/cleanup tools, cron tasks, etc.) could generate a Media Library bulk-delete request like the above, and what logging/setting I should enable to identify the source?
If WoodMart cannot generate this under any circumstance, please confirm that as well, and tell me the most likely WP-level causes you see in the field (plugin conflicts, scheduled actions, role/capability issues, etc.) so I can isolate it.
Thanks.
.
