WordPress malware plugins

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

Improve your WP security with powerful one-click tools like backup, WAF, and malware scan. Includes free tools like stats, CDN and social sharing.

Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.

The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.

A true Web Application Firewall to protect and secure WordPress.

The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.

Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.

Protect WordPress from malware, hackers, brute-force attacks and suspicious traffic. Includes firewall, login security, 2FA, and vulnerability checks.

A lightweight, fast and powerful virus scanner for WordPress.

Security plugin to protect your blog or website against exploits and spam injections.

(DEPRECATED: Please install "Jetpack VaultPress Backup" instead) Jetpack VaultPress offers real-time backups, one-click restores, and premiu …

WordPress multi-level security scanner detecting malware, 0-day threats, brute-force attacks, bot attacks, and unauthorized admin changes.

WordPress security plugin with free 8G firewall/WAF, 50+ security tests, vulnerability and core scanning, events logging, and AI-powered security repo …

Get instant protection against vulnerabilities disclosed by security companies.

Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.

Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more

WordPress firewall with cloud WAF rules, malware scanning, 2FA, vulnerability checks, IP blocking, and real-time security logs.

This plug-in can exhaustively scan program files on the site to detect malware and vulnerability. Also record hacking attempts against your site and b …

See Security Ninja vulnerabilities and security test results in your MainWP dashboard.

The WeSecur plugin audits and protects your WordPress by daily analyzing malware, blacklists and vulnerabilities that can be exploited to infect your …

Real-time firewall and anti-spam for WordPress. Block spam bots, comments, logins & registrations. No CAPTCHA, no slowdown.

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

Wordpress Security Plugin - Perform over 23 Basic Security Activities for your blog and get a free malware scan at the same time! See more details at …

Secure Your WordPress Site with Cutting-Edge Protection

An easy way to harden your website's security effectively.

Hardening tool that blocks hackers and protect against: Brute Force Attacks, Exploits, Injections, Clickjacking and other important functionalities.

Lightweight WordPress security scanner with live file watching, traffic protection, and one-click hardening. Detects malware early — before damage spr …

Hide firewall related UI elements, relocate datastore path and more.

VulnTitan security toolkit for WordPress sites. Detect and remove malware, vulnerable plugins, risky file changes, and comment or form spam.

Show all links in the site. This is useful to find injected links without your autorization.

Safe Sites is a WordPress security plugin offering real-time monitoring, file permission control, malware scanning, and plugin & theme security.

Frumentarii is a fast and smart malware scanner. Can detect Web Malwares. With smart code highlighting you can identify the infection.

MoeSec Security is a comprehensive plugin for Malware Scanning, Monitoring, Integrity, Security Hardening and Protection.

Scan all uploaded files with ClamAV or your favorite malware scanner

Virus scan and malware protection for Contact Form 7, WPForms, Gravity Forms, Formidable Forms, Iptanus File Upload, and more. Powered by Sophos.

Fullworks Security Scanner: Your Website's Guardian. Core, Themes, Plugins - Checked. Vulnerabilities - Squashed. Your Site - Secure.

Scan your WordPress database for hidden SEO spam, pharma hacks, malicious scripts, iframes and spam links in posts and blocks.

This widget displays global virus activity level with the latest Internet security threats.

SecurelyWP is a simple security plugin that protects your WordPress site right after activation—no setup needed for most features.

Safeguard your WordPress website from evolving malware, brute force attacks, hidden backdoors, and zero-day vulnerabilities.

MAT Firewall is a powerful WordPress security plugin that helps protect your website from malicious attacks, brute force attempts, and unauthorized ac …

Free WordPress malware scanner by Cleverhog: detect suspicious files, backdoors, weak logins, and outdated software from your dashboard.

A plugin to scan uploaded files for viruses with ClamAV.

Displays global virus and spyware activity level and latest spyware threats with guidelines how to remove them.

Monitor uptime, SSL, domain, integrity, malware, visual changes, activity, and errors. Lightweight client. Requires a WPMissionControl account.

Sabres offers powerful and unique protection for your website. Protect against a wide array of bot and web-based attacks, and defend your business.

Scans WordPress plugin, theme, and core directories for malicious code injections.

Simple search tool using regular expressions to find unwanted code in plugins.

This simple plugin enforces security measures against march 2020 attacks and handles breach notification

BlogSafe Honeypot is a 'lite' version our private research tool. Instead of tracking where visitors…

Scans WordPress files and database for malware indicators with practical cleanup workflows and backups.

WordPress security plugin with malware scanning, file integrity checks, login protection, update visibility, and optional FirePhage sync.

Automatically repairs or deletes files flagged by Wordfence Security on a configurable schedule.

Catches database-resident backdoors, rogue admins, malicious MySQL triggers and self-healing rootkits other scanners miss.

Monitor your site from the inside — file injections, rogue admin users, foreign-language content, brute force attacks, and security misconfigurations.

A powerful, user-friendly security tool that scans your website files and database for vulnerabilities, malware, and threats in minutes—keeping your d …

AI-powered WordPress security plugin that detects vulnerabilities and enhances website protection.

Firewall, 9 malware scanners, 2FA, country blocking, audit log preview — all free. 750+ WAF rules and 170,000+ signatures. No paywall.