Malcure Malware Shield — Removal, Repair, Monitor

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 59% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ nenadvuk

   4mo ago

   fantastic. it lasts long, needs 3-4 scan turns, but it cleans malware. But the first scan is longest, every other gets faster. Tried 5 different plugins, this is the only one that hepled me out and identified malware. Sent them unidentified malware I found myself and they updated their definitions within 4 hours! After days of trouble, within 3 days it seems I got rid of malware on 6 sites. great This topic was modified 2 months, 2 weeks ago by nenadvuk.

   Read on wp.org ↗
2. ★★★★★ groso

   4mo ago

   Thanks a lot for your work which we are allowed to use for free. Works very good, don’t know if it really, really finds ALL malware – but who knows?!

   Read on wp.org ↗
3. ★★★★★ Jonathan Sin

   5mo ago

   It’s so annoying!!! Many positions force me to do things, like paying for upgrades.

   Read on wp.org ↗
4. ★★★★★ sdesan

   7mo ago

   good database scangood file scangood problems explication: it’s possible to resolve a lot of problem using file editor and MySQL editing

   Read on wp.org ↗
5. ★★★★★ quickwebteam

   8mo ago

   Super Anti-Malware is easy to set up and works reliably. Fast scans, clear reports, and effective threat removal without slowing down the site. Highly recommended! This topic was modified 6 months, 2 weeks ago by quickwebteam.

   Read on wp.org ↗
6. ★★★★★ Marius

   10mo ago

   Works great!

   Read on wp.org ↗
7. ★★★★★ rjc3000

   1.2y ago

   This plugin gave me a great heads-up about a links injected into my posts and pages. I cleaned up the 100+ pages which had between 1-7 backlinks infecting them each page. Then I decided to randomly check a few other posts that had not been flagged — and I found around 25% of the remaining 500 posts still had the infection. And Malcure didn’t find them (and still doesn’t). I have been checking and clearing them manually. Not fun, but effective. I also changed the password, updated plugins, and deleted non active and older plugins that were not updated. I don’t know how they got access, but nothing new has come through in the past few weeks. So — great plugin for warning and finding a bunch of malware. But it missed A LOT (hundreds of infections). Room for improvement but a decent tool when used with other strategies. This topic was modified 1 year ago by rjc3000.

   Read on wp.org ↗
8. ★★★★★ Zeeshan A.

   1.3y ago

   I am a web developer and have tried many malware removal plugins, including popular ones like Wordfence and Sucuri. However, none of them detected some unusual files that were actually malware causing regular attacks. Some of these files were in JPG format, and I wonder if this plugin detects them effectively and alerts me. The only feature I find missing is background scanning—when I close the window, the scan stops. This topic was modified 1 year, 2 months ago by Zeeshan A..

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 19.9.6 Bugfix: Compatibility with PHP 5.6. Bugfix: User Scan resolves actual capabilities. 19.9.6
2. — Version 19.9.5 Bugfix: Fixed scanner not auto-updating definitions before scans. Feature: Email notification preferences. 19.9.5
3. — Version 19.9.4.1 Bugfix: Fixed fatal javascript error. 19.9.4.1
4. — Version 19.9.4 Feature: User Account Audit results in scans. Feature: SaaS-Served File Whitelist. Improvement: Enhanced Event Logging. Improvement: First-run UX performance optimisation. Bugfix: Some UI elements were not styled correct 19.9.4
5. — Version 19.9.3 Improvement: Stateful scanner now self-heals its monitor cron if WordPress cron is lost (e.g. after a server reboot). 19.9.3
6. — Version 19.9.2 Hardening: Strengthens scan input validation and database-query sanitisation for safer scans. Stability: Improves runtime handling and diagnostics reliability during scans. 19.9.2

3 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Malcure Malware Scanner <= 16.8 - Missing Authorization ↗
   2025-09-03 CVE-2025-3701 Missing Authorization Affects <= 16.8 Patched in 16.9
2. High · 8.1 Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal <= 17.0 - Authenticated (Subscriber+) Arbitrary File Deletion ↗
   2025-07-15 CVE-2025-6043 Missing Authorization Affects <= 17.0 Patched in 17.1
3. Medium · 6.5 Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal <= 16.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read ↗
   2025-06-12 CVE-2025-7772 Missing Authorization Affects <= 16.8 Patched in 16.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-11-15 9K+ → 10K+ up after 178 days in tier
2. 2023-05-21 8K+ → 9K+ up after 79 days in tier
3. 2023-03-03 7K+ → 8K+ up after 115 days in tier
4. 2022-11-08 6K+ → 7K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 2 shared tags A
• NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall 100K+ installs · 4.8★ · 2 shared tags A
• Defender Security – Malware Scanner, Login Security & Firewall 80K+ installs · 4.8★ · 2 shared tags A
• NinjaScanner – Virus & Malware scan 30K+ installs · 4.1★ · 2 shared tags B
• BulletProof Security 20K+ installs · 4.8★ · 2 shared tags A
• Jetpack VaultPress 10K+ installs · 3.8★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Malcure Malware Shield — Removal, Repair, Monitor into a readme, a review or a deck. It updates itself.

Malcure Malware Shield — Removal, Repair, Monitor: 10K+ active installs, 4.4★ (73 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-malware-removal