Database-first WordPress malware scanner and security plugin. Detect hidden SEO spam, pharma hacks, malicious scripts and links in posts & comments.

keith graham

Threat Scan Plugin

This is a very simple threat scan that looks for things out of place in the content directory as well as the database.

Vitalii Kaplia

Apache Password Protect

Simple, but strong HTTP security, to prevent Brute force attack. One-click solution!

andrewdjohns

SyntaxHighlighter Evolved: H Brush

Adds H language support in SyntaxHighlighter Evolved plugin. As used in mobile app "Hacked" (www.hackedapp.com). Includes Hackpad theme.

contentguardpro

<p>Content Guard Pro is a WordPress database malware scanner focused on threats hiding in posts, pages, custom post types, and Gutenberg blocks. It detects hidden SEO spam, malicious scripts, suspicious iframes, encoded payloads, and spam links that file-only scanners often miss.</p>
<p>Use it after a hacked-site cleanup, during routine security reviews, or before publishing risky content. It is built for agencies, site owners, and WordPress professionals who need database-level visibility alongside file-based security tools.</p>
<h4>What this WordPress malware scanner detects</h4>
<ul>
<li>Hidden spam links and cloaked content using CSS tricks such as display:none, visibility:hidden, opacity:0, and font-size:0</li>
<li>SEO spam injections including pharma, casino, crypto, gambling, and redirect spam</li>
<li>Suspicious external scripts, iframes, and links in posts and blocks</li>
<li>Obfuscated JavaScript such as eval(), fromCharCode(), Base64-encoded payloads, and data: URIs</li>
<li>URL shorteners and redirectors hiding final destinations</li>
<li>Cryptocurrency miner patterns</li>
<li>Multi-layer encoded content that needs decoding before review</li>
<li>Serialized malware in postmeta, selected options, and Elementor data when Standard Scan is enabled</li>
</ul>
<h4>Why Content Guard Pro is different</h4>
<p>Most WordPress security plugins focus on files, firewalls, login protection, or vulnerability checks. Content Guard Pro adds database-first scanning for places attackers often abuse: post content, Gutenberg blocks, and deeper WordPress data fields.</p>
<p>It is designed to complement file scanning, not replace it.</p>
<h4>Free plugin features</h4>
<ul>
<li>Quick Scan for wp_posts content, including posts, pages, and custom post types</li>
<li>WordPress malware removal</li>
<li>Gutenberg-aware scanning with recursive block parsing</li>
<li>Classic Editor and Block Editor single post scanning on save</li>
<li>Confidence scores and severity labels to help prioritize review</li>
<li>Admin notices, admin bar alerts, and dashboard summary</li>
<li>30-day scan history</li>
<li>Allowlist and denylist controls to reduce false positives</li>
<li>Unlimited manual scans</li>
</ul>
<h4>Premium adds deeper WordPress security scanning</h4>
<ul>
<li>Standard Scan for postmeta and selected options data</li>
<li>Elementor and deeper database scanning beyond wp_posts</li>
<li>Scheduled daily scans</li>
<li>Non-destructive quarantine</li>
<li>Email alerts and webhooks</li>
<li>Reputation checking and faster rule updates</li>
<li>CSV/JSON export and REST API access on higher tiers</li>
</ul>
<h4>Built for real WordPress cleanup work</h4>
<p>Content Guard Pro is useful when:<br />
* Google flags hidden spam or redirects but file scans look clean<br />
* A hacked site is cleaned and you want to verify nothing malicious remains in posts or metadata<br />
* You need a database malware scanner alongside your existing WordPress security stack<br />
* You want to review risky Gutenberg or Classic Editor content before publishing</p>
<h4>Low-noise findings</h4>
<p>Content Guard Pro uses confidence scoring, accessibility-aware rules, and allowlists so you can review suspicious content faster and spend less time on obvious false positives.</p>
<h4>External services & privacy</h4>
<p>This plugin can optionally connect to the Content Guard Pro cloud service for detection rule updates and security advisories. It also supports anonymous telemetry only if you explicitly opt in. Scanning runs locally on your server, and the plugin works offline with bundled rules.</p>
<p>When you opt in, the service may receive site URL, site name, WordPress version, PHP version, plugin version, optional email preferences you submit, and anonymous scan counts and duration. Post content, scan results, database contents, passwords, and visitor data are never sent.</p>
<p>Terms: <a href="https://contentguardpro.com/terms" rel="nofollow ugc">https://contentguardpro.com/terms</a><br />
Privacy Policy: <a href="https://contentguardpro.com/privacy" rel="nofollow ugc">https://contentguardpro.com/privacy</a></p>
<h4>Documentation & support</h4>
<p>Documentation: <a href="https://contentguardpro.com/docs" rel="nofollow ugc">https://contentguardpro.com/docs</a><br />
Support forum: <a href="https://wordpress.org/support/plugin/content-guard-pro/" rel="ugc">https://wordpress.org/support/plugin/content-guard-pro/</a></p>


Alternatives to Content Guard Pro – Database Malware Scanner, Spam Scanner & Security

Top alternatives