Defender Security – Malware Scanner, Login Security & Firewall

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Reviewers are happy, calling it effective and light on resources at the free tier and good value on Pro, with one report of a 5.10.0 conflict pushing Elementor Pro into safe mode and one complaint about nag notices outside the plugin.

1. ★★★★★ anker13

   2mo ago

   Gute Lösung, hat Sachen gefunden, die andere Security Tools nicht fanden.

   Read on wp.org ↗
2. ★★★★★ Nigel Parry

   4mo ago

   Does the job even at the free level. The premium obviously offers a more comprehensive set of options. Be sure to use backup software before letting security plugins do anything. They can often delete stuff you don’t want deleted. I use Updraft Plus. Even the free version allows you to install a clean WP, then the Updraft Plus plugin, then restore the whole site. Three steps.

   Read on wp.org ↗
3. ★★★★★ zebracrossing

   4mo ago

   I use it in all the sites that I make,

   Read on wp.org ↗
4. ★★★★★ maca8291

   4mo ago

   Best security plugin ever! I buy pro version after few test with free version! Excelent lightweight plugin! I uninstall Wordfence and i use now only this plugin! Price for Pro version is awesome and low – thanks alot. Wordfence is expensive! 🙂 This topic was modified 3 months ago by maca8291.

   Read on wp.org ↗
5. ★★★★★ ivanhomecom

   5mo ago

   Excellent app I recoment

   Read on wp.org ↗
6. ★★★★★ Mykola Kolos

   5mo ago

   After updating to version 5.10.0, it conflicts with Elementor Pro version 3.35.7It causes it to switch to safe mode.Disabling the plugin resolved the issue.The plugin handles security tasks well.

   Read on wp.org ↗
7. ★★★★★ lwloingo

   6mo ago

   Many attacks have been repelled, and you are well informed about the measures necessary to maintain protection.

   Read on wp.org ↗
8. ★★★★★ rohitsinghvi2006

   6mo ago

   If defender is with you you dont need to worry about your website.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-24 Version 6.2.2 Fix: Streamlined schema method by removing bootstrap trait 6.2.2
2. 2026-08-20 Version 6.2.1 Fix: 2FA > Web Authentication method binds credential verification to the target user (props: Tai) 6.2.1
3. 2026-08-18 Version 6.2.0 New: Audit Log for Free Hub and WP.org users Enhancement: Compatibility with WordPress 7.1 Enhancement: Replace PHP-DI third-party package with custom lightweight DI Container Enhancement: Display the Audit Log Storage r 6.2.0
4. 2026-07-22 Version 6.1.0 Enhancement: Improved compatibility of Central IP list status with Unlimited Hosting environments Enhancement: Extended Whitelabel support to cover Global Firewall branding Enhancement: User Agent lockout features reflec 6.1.0
5. 2026-07-08 Version 6.0.1 Fix: Resolved a fatal error caused by legacy null date values 6.0.1
6. 2026-07-07 Version 6.0.0 New: Reimagined Defender interface for a seamless, clutter-free optimization experience New: Comprehensive Activity Log to track scans, optimizations, and configuration changes in real time Enhancement: Transitioned to r 6.0.0

7 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Defender Security <= 4.7.2 - Missing Authorization ↗
   2024-06-28 CVE-2024-37444 Missing Authorization Affects <= 4.7.2 Patched in 4.7.3
2. Medium · 6.5 Defender Security <= 4.4.1 - IP Address Spoofing ↗
   2024-02-12 CVE-2024-25595 Protection Mechanism Failure Affects <= 4.4.1 Patched in 4.4.2
3. Medium · 5.3 Defender Security <= 4.1.0 - Sensitive Information Exposure via Log File ↗
   2023-12-27 CVE-2023-51490 Insertion of Sensitive Information into Log File Affects <= 4.1.0 Patched in 4.2.0
4. Medium · 5.3 Defender Security <= 4.2.0 - Masked Login Area Security Feature Bypass ↗
   2023-11-03 CVE-2023-47189 Protection Mechanism Failure Affects <= 4.2.0 Patched in 4.2.1
5. Medium · 5.3 Defender Security <= 4.0.2 - Hide Login Page Feature Protection Bypass ↗
   2023-09-06 CVE-2023-5089 Protection Mechanism Failure Affects <= 4.0.2 Patched in 4.1.0
6. High · 7.5 Defender Security <= 3.3.2 - Sensitive Information Disclosure ↗
   2022-11-23 CVE-2022-44581 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.3.2 Patched in 3.3.3
7. Medium · 4.3 Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypass ↗
   2021-03-01 CVE-2021-4425 Cross-Site Request Forgery (CSRF) Affects <= 2.4.6 Patched in 2.4.6.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 26 languages, 0 at 90% or more

Plus 2 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-05-22 90K+ → 80K+ down after 952 days in tier
2. 2023-10-13 80K+ → 90K+ up after 3 days in tier
3. 2023-10-10 90K+ → 80K+ down after 94 days in tier
4. 2023-07-08 80K+ → 90K+ up after 199 days in tier
5. 2022-12-21 70K+ → 80K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• BulletProof Security 20K+ installs · 4.8★ · 4 shared tags A
• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 3 shared tags A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 3 shared tags A
• Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 3 shared tags A
• All-In-One Security (AIOS) – Security and Firewall 1M+ installs · 4.7★ · 3 shared tags A
• Sucuri Security – Auditing, Malware Scanner and Security Hardening 600K+ installs · 4.2★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Defender Security – Malware Scanner, Login Security & Firewall into a readme, a review or a deck. It updates itself.

Defender Security – Malware Scanner, Login Security & Firewall: 80K+ active installs, 4.8★ (334 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/defender-security