Best malicious plugins for WordPress
The most popular malicious plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. WP Maltor leads with 30+ active installs, ahead of Code Scanner (10+). All 2 plugins tagged “malicious” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 2 malicious plugins
- 1.
WP MaltorThe most installed malicious plugin, with 30+ active installs. Only 3 reviews so far, last updated 10 years ago. Tested only up to WordPress 4.5.33.
- 2.
Code Scanner10+ active installs. No reviews yet, last updated 7 years ago. Tested only up to WordPress 5.1.0.
All 2 plugins tagged “malicious”
WP Maltor
Down in the last 7 days:219#24,062by David Merinas10 years ago
This plugin blocks traffic from malicious IP and Tor Network
- Installs
- 30+
- Rating
- 4.3(3)
- Downloads
- 3/day
Code Scanner
Up in the last 7 days:3,667#43,269by Magda Sicknick7 years ago
Scans WordPress plugin, theme, and core directories for malicious code injections.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day