Best vulnerability scanner plugins for WordPress
The most popular vulnerability scanner plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Malcure Malware Shield leads with 10K+ active installs, ahead of SiteLock Security (1K+) and DevDome Malware Scanner (300+). All 21 plugins tagged “vulnerability scanner” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 vulnerability scanner plugins
- 1.
Malcure Malware ShieldThe most installed vulnerability scanner plugin, with 10K+ active installs. Rated 4.4 from 74 reviews, updated 4 weeks ago.
- 2.
SiteLock Security1K+ active installs. Rated 3.4 from 14 reviews, updated 4 months ago.
- 3.
DevDome Malware Scanner300+ active installs. Only 3 reviews so far, updated 1 week ago.
- 4.
Lockora Security Audit200+ active installs. Only 4 reviews so far, updated 1 month ago.
- 5.
VulnTitan100+ active installs. Only 2 reviews so far, updated 1 month ago.
- 6.
SiteCare40+ active installs. Only 2 reviews so far, updated 4 days ago.
- 7.
Ensomedia Security powered by shieldwave.io20+ active installs. No reviews yet, updated 1 week ago.
- 8.
Hard Guard Security10+ active installs. No reviews yet, updated 3 weeks ago.
- 9.
FreelanceBo Sentra ControlFewer than 10 active installs. No reviews yet, updated 4 weeks ago.
- 10.
IGW Security HistoryFewer than 10 active installs. No reviews yet, updated 1 month ago.
All 21 plugins tagged “vulnerability scanner”
Malcure Malware Shield
Down in the last 7 days:5#2,048by Malcure Web Security28 days ago
Malware scanner and monitor.
- Installs
- 10K+
- Rating
- 4.4(74)
- Downloads
- 131/day
SiteLock Security
Up in the last 7 days:4#5,691by SiteLock4 months ago
Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.
- Installs
- 1K+
- Rating
- 3.4(14)
- Downloads
- 22/day
DevDome Malware Scanner
Up in the last 7 days:95#10,684by DevDome12 days ago
WordPress malware scanner and virus scanner for hacked sites. Find malware, backdoors and malicious code, then remove it with quarantine and repair.
- Installs
- 300+
- Rating
- 5.0(3)
- Downloads
- 221/day
Lockora Security Audit
Down in the last 7 days:116#12,718by Guido Schad1 month ago
Lockora Security Audit checks WordPress security posture, hardening, core integrity, vulnerabilities, and optional AI reports.
- Installs
- 200+
- Rating
- 5.0(4)
- Downloads
- 11/day
VulnTitan
Up in the last 7 days:78#16,334by Jaroslav Svetlik1 month ago
VulnTitan security toolkit for WordPress sites. Detect and remove malware, vulnerable plugins, risky file changes, and comment or form spam.
- Installs
- 100+
- Rating
- 5.0(2)
- Downloads
- 11/day
SiteCare
Up in the last 7 days:124#22,109by SiteCare4 days ago
Know the instant a plugin, theme or WordPress core has a known security hole - with a security score and clear fixes. Patch before attackers do.
- Installs
- 40+
- Rating
- 5.0(2)
- Downloads
- 0/day
Ensomedia Security powered by shieldwave.io
#28,583by shieldwave12 days ago
Finds malware, tampered files, known vulnerabilities, injected content and risky settings, and explains each fix in plain words.
- Installs
- 20+
- Rating
- –
- Downloads
- 11/day
Hard Guard Security
Up in the last 7 days:542#30,704by endriu77726 days ago
Free WordPress security plugin with malware scanner, vulnerability scanner, 2FA, brute force & login protection, audit log and hardening.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
FreelanceBo Sentra Control
Up in the last 7 days:24,314#49,131by FreelanceBo Group S.r.l.s29 days ago
Security agent connecting to FreelanceBo Sentra Control console for WAF, malware scanning, brute force protection, and vulnerability scanning.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
IGW Security History
Up in the last 7 days:19,471#50,145by Francisco GP (crishnakh)1 month ago
Review the security history of your installed plugins and check whether their current versions are affected by known vulnerabilities.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
GeniousSonu Site Checkup
Up in the last 7 days:18,451#50,788by SAHINUR18 days ago
Strengthen your WordPress security with an automated hardening checklist, vulnerability scanner, one-click safe fixes, and client audit reports.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Haq Security CVE Monitor
#54,516by haqsec1 month ago
Real-time CVE vulnerability monitor and security auditing GUI dashboard for WordPress powered by Haq Security API.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Shieldome Security Scanner
#57,569by nemanjashieldome2 days ago
Scan your WordPress site for OWASP Top 10 vulnerabilities directly from the wp-admin dashboard, powered by Shieldome.
- Installs
- <10
- Rating
- –
- Downloads
- 67/day
Resilience Compliance Manager
#57,770by bean13528 months ago
CRA compliance for WordPress developers. Checklist, document generator, vulnerability scanner, and incident reporting for the 2026 EU deadline.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
WebSentry Security Monitor
#61,481by Websentry Security9 days ago
Check your site's security from WordPress: SSL, security headers, cookies and DNS, graded A-F. Free account, no credit card.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day
Watchfox AI
#62,450by ajeermahmood1 day ago
Vulnerability alerts by email. A plain-English plugin vulnerability scanner that says what to fix and by when. Free for one site.
- Installs
- <10
- Rating
- –
- Downloads
- 103/day
Dragon Compliance
Down in the last 7 days:15,415#65,212by Dragon Core29 days ago
CRA and NIS2 compliance for WordPress: software inventory, SBOM export, vulnerability scanning, readiness checklist and a timestamped evidence log.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Squish Site Patrol
Down in the last 7 days:2,043#65,413by squishit7 months ago
Complete WordPress security, malware scanning, login protection, and performance monitoring in one clean dashboard.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Ghostables Defender Lite
#66,348by ghostables4 months ago
Active security for WordPress: vulnerability scanning, file integrity, hardening checklist, two-factor authentication, and a tamper-evident audit log.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Korisec Security
Down in the last 7 days:18,927#72,694by korisec17 days ago
Cloud vulnerability checks, login protection, and free encrypted backups to your own Google Drive with one-click rollback.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Catcher24 Connector
Down in the last 7 days:18,251#74,016by Catcher2418 days ago
Connect your WordPress site to Catcher24 for automated vulnerability scanning and security analysis with minimal performance impact.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day