Plugin Pulse
← Pulse

MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall

by malcare · Security

Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.

How scoring works →
87 Health · A
Maintenance 100/100
Rating quality 85/100
Support 70/100

87 health vs 64 average across 997 Security plugins

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

97 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100
WP compatibility 100/100
Rating quality 87/100
Listing tuning 100/100
Support resolution 100/100

Daily downloads

Since 2022-10-05 · 1,421 days · wp.org + Plugin Pulse archive

+578% vs prior 30d
0Downloads · Aug 26

30-day downloads

Rolling 30-day volume · peaks are release surges

295.8K

now · peak 2.0M

298.1K30d downloads · Aug 26

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

MalCare WordPress Se · #283 you Quttera ThreatSign · #2042 Site Lockdown Securi · #8515 Segurium · #48968

Rating trend

Star average over time · dips mark rough releases

4.4Stars · Aug 26

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

1.5Kper 1k installs · Aug 26

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

6

releases in the last 12 months

3mo ago

latest release · v6.48

83

tagged releases on record

Recent releases

6.48 · 3mo ago6.47 · 3mo ago6.44 · 4mo ago6.39 · 4mo ago6.36 · 7mo ago6.02 · 9mo ago5.93 · 1.4y ago5.92 · 1.4y ago5.91 · 1.6y ago5.88 · 1.7y ago5.81 · 1.7y ago5.85 · 1.7y ago5.77 · 1.9y ago5.73 · 2.0y ago

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v6.48 68%
v6.02 6.3%
Older / other versions 26%

Estimated active installs

The public count shows “200K+”. Our estimate pins where the real number sits.

tracked estimate
200K–300K ≈290K

Refined from the date this plugin crossed into its current band.

Install history · since 2019-05-14 · 1,438 observations

200KInstalls · Aug 26

Estimated value

What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.

Est. annual revenue

N/A

Est. acquisition value

N/A

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Details

Version
6.65
Last updated
10d ago
Added
2018-01-30 · 8 yrs old
Requires WP
4.0
Tested up to
7.1
Requires PHP
7.0

Recent reviews

All reviews on wp.org ↗
  1. kenswinton
    1mo ago

    I completely messed my login up and was unable to change my password. I raised a ticket which was answered within an hour. I followed the provided link with a temporary password, was able to log in and change the password to my own.

    Read on wp.org ↗
  2. doug45208
    1mo ago

    MalCare noticed a vulnerable plug-in. At first glance it looked okay on my end (was up-to-date and supported). So I submitted a ticket to ask for help on figuring out why it was flagged as vulnerable, and they responded very quickly and answered my question. This topic was modified 6 days, 20 hours ago by doug45208.

    Read on wp.org ↗
  3. debiemer
    2mo ago

    I originally tried it when my host’s security couldn’t identify the source of a repeated compromise and malcare found the offending plugin. Support has been fantastic.

    Read on wp.org ↗
  4. Anonymous
    2mo ago

    MalCare is not only effective, the product service and support is timely, reliable and effective.

    Read on wp.org ↗
  5. casefixedwebdesign
    2mo ago

    Great support from the team

    Read on wp.org ↗
  6. lucaswap
    2mo ago

    Excellent support team, useful features, A+ experience and value.

    Read on wp.org ↗
  7. webmanonline
    2mo ago

    The support team are very responsive indeed.

    Read on wp.org ↗
  8. jamie1357
    2mo ago

    I was very happy and satisfied with the results of Bharath handling the hidden content on my site. Professional and very efficient. Thank you

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. Version 6.48 Fix: Preserve default PHP error handling after PHP Error Monitoring processes an error. Tweak: Reduce repeated firewall IP whitelist lookups. 6.48
  2. Version 6.47 Fix: Prevent stale WordPress core update cleanup rules from deleting files added by newer WordPress core packages. 6.47
  3. Version 6.44 Tweak: Improved the WP core updates flow. Tweak: Improved the plugin auto-install flow. 6.44
  4. Version 6.39 Tweak: Code Restructuring New: Added Connection key support 6.39
  5. Version 6.36 New: Added deactivation feedback form to collect user feedback when deactivating the plugin Tweak: Improvements in Auto-login and File System Tweak: Code Restructuring 6.36
  6. Version 6.02 Tweak: Improved Authentication 6.02

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Low memory footprint
Low page-speed impact
Runs on latest PHP + WP
No PHP errors
No JS errors
Activates cleanly
No resource errors
No external HTTP errors
Optimized database use
Frequently updated

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2024-12-28 300K+ → 200K+ down after 11 days in tier
  2. 2024-12-17 400K+ → 300K+ down after 43 days in tier
  3. 2024-11-04 500K+ → 400K+ down after 110 days in tier
  4. 2024-07-17 400K+ → 500K+ up after 314 days in tier
  5. 2023-09-07 300K+ → 400K+ up after 262 days in tier
  6. 2022-12-19 200K+ → 300K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Compare head to head →

Embed this report card

Drop a live Pulse card for MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/malcare-security" width="480" height="300" style="border:0" loading="lazy" title="MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall — Plugin Pulse"></iframe>
Preview card ↗

MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall: 200K+ active installs, 4.4★ (544 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/malcare-security