Best malware plugins for WordPress

Wordfence Security

#11

by Mark Maunder1 month ago

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

Kadence Security

#88

by Nexcess24 days ago

Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.

Sucuri Security

#106

by Sucuri25 days ago

The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.

NinjaFirewall (WP Edition)

Up in the last 7 days:1#343

by nintechnet1 day ago

A true Web Application Firewall to protect and secure WordPress.

Jetpack Protect

#356

by Automattic2 months ago

Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!

Defender Security

Up in the last 7 days:3#519

by WPMU DEV - Your All-in-One WordPress Platform1 month ago

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

SecuPress with Simple SSL

Up in the last 7 days:1#885

by SecuPress2 days ago

Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.

Security Plugin, Firewall & Malware Scanner with Auto Removal

Down in the last 7 days:3#886

by CleanTalk Inc12 days ago

Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.

NinjaScanner

Up in the last 7 days:1#905

by nintechnet2 months ago

A lightweight, fast and powerful virus scanner for WordPress.

AntiVirus

Up in the last 7 days:2#1,078

by pluginkollektiv1 month ago

Security plugin to protect your blog or website against exploits and spam injections.

Jetpack VaultPress

Up in the last 7 days:10#2,144

by Automattic25 days ago

(DEPRECATED: Please install "Jetpack VaultPress Backup" instead) Jetpack VaultPress offers real-time backups, one-click restores, and premiu …

Security Ninja

Down in the last 7 days:1#2,518

by cleverplugins5 days ago

WordPress security plugin: free 8G firewall/WAF, 50+ tests, vulnerability/core scanning, events logging, AI reports.

Vigilant

Up in the last 7 days:61#3,596

by Fernando Telladotoday

Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more

DefendWP Firewall

Down in the last 7 days:2#4,131

by revmakx1 year ago

Get instant protection against vulnerabilities disclosed by security companies.

Compromise Scanner for wp2shell

Down in the last 7 days:13#4,206

by eyesecurity3 months ago

Read-only forensic scanner for the WordPress core exploit chain CVE-2026-63030 / CVE-2026-60137 (wp2shell). Reports a scored verdict; changes nothing.

Atomic Edge Security

Up in the last 7 days:84#7,799

by shift81 month ago

WordPress firewall with cloud WAF rules, malware scanning, 2FA, vulnerability checks, IP blocking, and real-time security logs.

WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite

Up in the last 7 days:8#8,124

by WP Doctorワードプレスドクター1 year ago

This plug-in can exhaustively scan program files on the site to detect malware and vulnerability. Also record hacking attempts against your site and b …

Security Ninja For MainWP

Down in the last 7 days:95#9,376

by Lars Koudal11 days ago

See Security Ninja vulnerabilities and security test results in your MainWP dashboard.

Malcure Security Suite

Down in the last 7 days:3#11,534

by Malware Intercept1 year ago

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

Cleverhog Malware Scanner

Up in the last 7 days:326#14,855

by cleverhog1 month ago

Totally free malware scanner with no paid features: find infected files, backdoors, hacked core files, rogue admins and outdated software.

Batch REST Guard

Down in the last 7 days:26#15,993

by vladanrs3 months ago

Block wp2shell REST batch attacks (CVE-2026-63030). Detect fake admins and backdoor plugins. Extra security for hacked sites.

WPSecureOps Connector

Up in the last 7 days:177#17,277

by Guido Schad2 months ago

Forward completed Wordfence scan findings to your WPSecureOps dashboard, so one team can triage alerts across every site it looks after.

Deep Malware Cleaner

Up in the last 7 days:118#18,041

by wordpressdirect2 months ago

Lightweight deep malware scanner for WordPress — deep scan, core integrity check, backdoor fixer, redirect hack fix, and login protection.

Weglob Auto Repair for Wordfence Security

#18,330

by Weglob19 days ago

Automatically repairs or deletes files flagged by Wordfence Security on a configurable schedule.

SecurynAI

Up in the last 7 days:9,366#18,994

by WisdmLabs2 days ago

Firewall, malware scanning, and vulnerability alerts — with every finding explained in plain English and the exact fix to apply.

Iron Security

Down in the last 7 days:104#20,328

by WpIron1 year ago

Hardening tool that blocks hackers and protect against: Brute Force Attacks, Exploits, Injections, Clickjacking and other important functionalities.

CenterShield

Up in the last 7 days:4,360#20,424

by WPセンター11 days ago

WordPress security for Japanese sites: login protection, 2FA, file protection and malware scanning, each explained in clear Japanese.

MoeSec Security

#20,838

by MoeSec2 months ago

MoeSec Security is a comprehensive plugin for Malware Scanning, Monitoring, Integrity, Security Hardening and Protection.

Bastora Security Audit

Down in the last 7 days:915#21,285

by Bastora2 days ago

62-Punkte-Sicherheits-Check mit Firewall, Schadcode-Scanner, URL-Reputation, Captcha, Schwarm-Schutz und Auto-Reparatur der WordPress-Kerndateien.

Forvault Security

Up in the last 7 days:203#22,575

by Store Armory4 months ago

Forensic, read-only malware and integrity scanner: heuristic web-shell detection, core-checksum verification, and a file-change baseline.

Turbo Guard

Up in the last 7 days:3,200#22,793

by Turbo Addons6 days ago

WordPress security plugin with malware scanner, firewall, 2FA, vulnerability scanner, and file integrity checker. Free scan, 3 free cleanups.

Custom settings for Sucuri Scanner

Down in the last 7 days:136#22,912

by Viktor Szépe10 years ago

Hide firewall related UI elements, relocate datastore path and more.

AMWScan Antimalware Scanner Lite

Up in the last 7 days:758#24,115

by Marco Cesarato1 month ago

Block risky uploads and run malware, integrity, vulnerability, and reputation scans from your WordPress dashboard.

CoxWall

Down in the last 7 days:128#24,663

by themelooks1 day ago

Professional WordPress security plugin with firewall, brute-force protection, login hardening, security headers, and file integrity monitoring.

Malroot Security

Up in the last 7 days:749#24,803

by Niraj Pal4 months ago

Catches database-resident backdoors, rogue admins, malicious MySQL triggers and self-healing rootkits other scanners miss.

My Links

Down in the last 7 days:837#25,544

by Pedro H. Ocampo V.3 years ago

Show all links in the site. This is useful to find injected links without your autorization.

BrandBees Malware Guardian

Down in the last 7 days:141#26,073

by BrandBees6 months ago

Scans WordPress files and database for malware indicators with practical cleanup workflows and backups.

Neurax Site Health Analyzer

Down in the last 7 days:297#26,129

by neuraxhost1 month ago

Analyze SEO, security, malware, performance, accessibility, privacy, visitor analytics, and overall site health.

Stillward Security

Up in the last 7 days:1,258#27,848

by Adnan Ali1 month ago

Lightweight, safe-by-default WordPress security. Hardens your site without interfering with normal behaviour. Aggressive features are opt-in.

Frumentarii Security Malware Scanner and Anti Virus

#28,034

by Shieldfy10 years ago

Frumentarii is a fast and smart malware scanner. Can detect Web Malwares. With smart code highlighting you can identify the infection.

Safe Sites

#30,205

by Hidayat Mahetar8 months ago

Safe Sites is a WordPress security plugin offering real-time monitoring, file permission control, malware scanning, and plugin & theme security.

Wieczo's Virus Scanner

#31,244

by wieczo2 years ago

A plugin to scan uploaded files for viruses with ClamAV.

Bulwarden

#31,434

by jgloeckl.de4 days ago

Site agent for health monitoring, malware scanning, encrypted backups and remote updates, driven by a Bulwarden hub you connect it to.

Stalza Security

Up in the last 7 days:518#31,577

by Fuad K M28 days ago

Smart WordPress security without the bloat: integrity, malware, vulnerability and brute-force protection, explained and prioritized.

Owl Security

Up in the last 7 days:132#31,905

by Owlgorithm Labs2 months ago

All-in-one WordPress security: firewall, malware scanner, login protection, 2FA, and backups in one clean, lightweight dashboard.

Fullworks Security Scanner

Up in the last 7 days:1,496#33,147

by fullworks2 months ago

Fullworks Security Scanner: Your Website's Guardian. Core, Themes, Plugins - Checked. Vulnerabilities - Squashed. Your Site - Secure.

Virus Activity

Up in the last 7 days:10#34,576

by virusactivity8 years ago

This widget displays global virus activity level with the latest Internet security threats.

Global threat activity level Widget

Up in the last 7 days:10,478#37,352

by pcrisk8 months ago

Displays global virus and spyware activity level and latest spyware threats with guidelines how to remove them.

FirePhage Security

Up in the last 7 days:5,291#41,474

by Nikola (FirePhage)3 months ago

WordPress security plugin with malware scanning, file integrity checks, login protection, update visibility, and optional FirePhage sync.

Code Scanner

Up in the last 7 days:3,667#43,269

by Magda Sicknick7 years ago

Scans WordPress plugin, theme, and core directories for malicious code injections.