Melapress File Monitor

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

At the current install trend, crossing 7K+ in roughly 195 days.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ Marcos Nakamine

   5mo ago

   Awesome plugin

   Read on wp.org ↗
2. ★★★★★ alfy40

   9mo ago

   I’m not expecting / warranting an answer, I just want to state for the record (and for other interested parties) that this plugin is very badly coded and has caused me a lot of problems. First off, it doesn’t purge its Cron jobs and wp_options after being disabled/removed. Second off, those Cron jobs and wp_options have created an absolute BLOAT on my site. After just a couple of week there were MILLIONS of mfm_directory_runner% spam entries in my wp_options. Also the daily mfm_monitor_file_changes cron job was crashing my php-fpm (resource exhaustion). If you want to monitor file changes on the site, it’s much better to write a short bash script and run it through a cron job, than doing anything at the WordPress level. This plugin has been a big mistake, and any plugin like it would very likely also be a big mistake.

   Read on wp.org ↗
3. ★★★★★ Shawn

   11mo ago

   Melapress is a great plugin but I hate it when plugins doesn’t clean-up their DB table leftover after uninstall. Add an option in the settings to delete db tables on uninstall. If you want to uninstall this completely, drop these 6 tables mfm_eventsmfm_events_metadatamfm_scanned_directoriesmfm_scanned_filesmfm_stored_directoriesmfm_stored_files

   Read on wp.org ↗
4. ★★★★★ moholkar

   1.0y ago

   Only just started using it really, but it seems to be doing what we need. Support were very quick in creating a patch for a bug that turned up.

   Read on wp.org ↗
5. ★★★★★ Merge, Inc

   1.2y ago

   We are using it for more than 2 years now with real great results. One of its kind for such a topic (files monitor). Really recommended.

   Read on wp.org ↗
6. ★★★★★ erchache2000

   1.5y ago

   Un must, un imprescindible.Este plugin añade una capa de monitorización a tu instancia WordPress para saber en todo momento si “algo” se ha colado sin permiso. Si no andara escaso de capital me suscribía a la opción Pro.

   Read on wp.org ↗
7. ★★★★★ David Rychlý

   2.1y ago

   Plugin is great for monitoring, but there are some small issues currently with the settings of the notifications which should be fixed in the next release. it would be great to have option to export and import settings of the plugin (mainly ignored folders), which would be useful if using plugin on multiple websites (you can achieve it in the database, but it’s not very user friendly).

   Read on wp.org ↗
8. ★★★★★ echoleaf

   2.4y ago

   On a custom, self-managed VPS this plug brought my server to its knees, resulting in constant 504 gateway timeouts until I deleted it. Glad I only tested this on one site, I will not use it again and will keep my files locked down instead. This topic was modified 2 years, 3 months ago by echoleaf.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-26 Version 2.4.0 New feature & functionality Added an optional in-plugin survey to help us understand how Melapress File Monitor is used. Functionality & plugin improvement Changed the WP Activity Log integration event ID from 6073 to 60 2.4.0
2. 2026-02-26 Version 2.3 New features Added support for wildcards in folder exclusions: you can now use * , ** , and ? wildcards when defining the directories you want to exclude. Plugin improvements Excluded file extensions are now fully skippe 2.3

4 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Melapress File Monitor < 2.2.0 - Missing Authorization ↗
   2025-07-03 CVE-2025-3702 Missing Authorization Affects < 2.2.0 Patched in 2.2.0
2. Medium · 4.9 Melapress File Monitor <= 2.0.2 - Authenticated (Admin+) Authenticated SQL Injection ↗
   2025-03-02 CVE-2024-10009 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.0.2 Patched in 2.1.0
3. Medium · 4.9 Melapress File Monitor <= 2.1.0 - Authenticated (Admin+) Authenticated SQL Injection ↗
   2025-03-02 CVE-2024-9879 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.1.0 Patched in 2.1.1
4. High · 7.2 Website File Changes Monitor <= 1.8.2 - Authenticated (Admin+) SQL Injection ↗
   2022-07-13 CVE-2022-2269 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.8.2 Patched in 1.8.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 11 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-10 5K+ → 6K+ up after 12 days in tier
2. 2026-06-28 6K+ → 5K+ down after 3 days in tier
3. 2026-06-25 5K+ → 6K+ up after 1 days in tier
4. 2026-06-24 6K+ → 5K+ down after 3 days in tier
5. 2026-06-21 5K+ → 6K+ up after 2 days in tier
6. 2026-06-19 6K+ → 5K+ down after 43 days in tier
7. 2026-05-07 5K+ → 6K+ up after 2 days in tier
8. 2026-05-05 6K+ → 5K+ down after 2 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 1 shared tag A
• Hostinger Tools 3M+ installs · 3.6★ · 1 shared tag B
• Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 1 shared tag A
• Jetpack – WP Security, Backup, Speed, & Growth 3M+ installs · 3.8★ · 1 shared tag A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 1 shared tag A
• Loginizer 1M+ installs · 4.8★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for Melapress File Monitor into a readme, a review or a deck. It updates itself.

Melapress File Monitor: 6K+ active installs, 4.1★ (32 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/website-file-changes-monitor