[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAnuyB_DOKIeKK2MYUC2FWVXMwJkb40apijlWhoqISZM":3,"$fW929oUx0H7DEnd1UavxH5_rjJMLG7y_qQLeCwDhwkJI":277,"$f4ljP1Mo9XHe-Y77LfVMA15CEKdj1tBn3CBN8QHs2lVY":281},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":36,"analysis":139,"fingerprints":233},"brandbees-malware-guardian","BrandBees Malware Guardian","1.0.0","BrandBees","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrandbees\u002F","\u003Cp>BrandBees Malware Guardian is a WordPress security plugin focused on local malware detection for files and database content. It helps administrators identify suspicious code patterns, prioritize risk, and clean threats with safer workflows.\u003C\u002Fp>\n\u003Cp>Core scanning works locally on your WordPress site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>File scanning\u003C\u002Fstrong> – Scans plugin, theme, and upload paths for suspicious PHP\u002FJS\u002FHTML patterns\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database scanning\u003C\u002Fstrong> – Checks posts, options, comments, and other content for injected malware\u002Fspam indicators\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Signature detection\u003C\u002Fstrong> – Uses curated threat signatures and heuristic pattern matching\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Risk prioritization\u003C\u002Fstrong> – Threats are classified by severity and confidence\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cleanup workflows\u003C\u002Fstrong> – Guided remediation with backup-aware patch flows\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scan scheduling\u003C\u002Fstrong> – Supports recurring scans via WP-Cron\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Alerting support\u003C\u002Fstrong> – Notifications for newly detected threats\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scan history\u003C\u002Fstrong> – Keeps local records to help compare and track changes over time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Typical Workflow\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Open \u003Cstrong>BB Malware Guard\u003C\u002Fstrong> in wp-admin\u003C\u002Fli>\n\u003Cli>Run a scan (or wait for a scheduled run)\u003C\u002Fli>\n\u003Cli>Review findings by severity\u002Fconfidence\u003C\u002Fli>\n\u003Cli>Apply cleanup actions where appropriate\u003C\u002Fli>\n\u003Cli>Re-scan to verify clean status\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support requests, please use the WordPress.org support forum for this plugin.\u003C\u002Fp>\n\u003Cp>Website: https:\u002F\u002Fbrandbees.net\u002Fcontact-us\u002F\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin can optionally use third-party threat intelligence services. Core local file\u002Fdatabase scanning works without these services.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>PhishTank\u003C\u002Fstrong> (Cisco Talos): Optional phishing feed source used for local URL reputation checks when enabled.\u003Cbr \u002F>\nTerms: https:\u002F\u002Fphishtank.org\u002Fterms.php\u003Cbr \u002F>\nPrivacy: https:\u002F\u002Fwww.phishtank.org\u002Fprivacy.php\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>VirusTotal\u003C\u002Fstrong>: Optional URL reputation lookup used only when VirusTotal integration is enabled and configured.\u003Cbr \u002F>\nTerms: https:\u002F\u002Fwww.virustotal.com\u002Fgui\u002Fterms-of-service\u003Cbr \u002F>\nPrivacy: https:\u002F\u002Fwww.virustotal.com\u002Fgui\u002Fprivacy-policy\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Google Safe Browsing API\u003C\u002Fstrong>: Optional threat lookup used only when Safe Browsing integration is enabled and configured.\u003Cbr \u002F>\nTerms: https:\u002F\u002Fdevelopers.google.com\u002Fsafe-browsing\u002Fv4\u002Fterms\u003Cbr \u002F>\nPrivacy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>WordPress.org update APIs may also be contacted by WordPress itself for update\u002Fmetadata checks.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>BrandBees Malware Guardian is designed for privacy-conscious operations:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Core scanning is performed locally on your server\u003C\u002Fli>\n\u003Cli>Scan results are stored locally in your WordPress database\u003C\u002Fli>\n\u003Cli>Optional external integrations are disabled by default and used only when enabled\u002Fconfigured\u003C\u002Fli>\n\u003Cli>Backups created by cleanup workflows are stored on your server\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Developed by Brand Bees: https:\u002F\u002Fbrandbees.net\u002F\u003Cbr \u002F>\nContributor profile: \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fgenius786\u002F\" rel=\"nofollow ugc\">Hassan Ejaz (@genius786)\u003C\u002Fa>\u003C\u002Fp>\n","Scans WordPress files and database for malware indicators with practical cleanup workflows and backups.",0,23,"2026-04-16T08:10:00.000Z","6.9.4","5.8","7.4",[18,19,20,21,22],"malware","malware-detection","scanner","security","wordpress-security","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbrandbees-malware-guardian.1.0.0.zip",100,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"brandbees",2,30,94,"2026-05-19T19:44:54.215Z",[37,59,82,101,123],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":14,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":57,"download_link":58,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"malcare-security","MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall","6.39","malcare","https:\u002F\u002Fprofiles.wordpress.org\u002Fmalcare\u002F","\u003Ch3>MALCARE SECURITY SERVICES\u003C\u002Fh3>\n\u003Cp>Security Plugin For WordPress Websites\u003Cbr \u002F>\n★★★★★\u003C\u002Fp>\n\u003Cp>A WordPress security plugin ensures that your website remains completely safe and secure, always. We created \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002F\" rel=\"nofollow ugc\">MalCare Security Plugin\u003C\u002Fa> to help website owners worry less about their site security, achieve peace of mind and focus all their energies on growing their business or website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why you need MalCare Security?\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fj3h0JF0we4o?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Difference Between MalCare Free vs Premium\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F4ja5ix9WDCo?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>Why MalCare is best WordPress security plugin?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fvt-0TrMV-TQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>MalCare in 1 Minute – Overview\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FH1XRntW_FeE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Important Links: \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Ffeatures\u002F\" rel=\"nofollow ugc\">Security Features\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002F\" rel=\"nofollow ugc\">Why Choose MalCare?\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Ftop-wordpress-security-plugins-compared\u002F\" rel=\"nofollow ugc\">Comparisons\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fmalcare-free-premium\u002F\" rel=\"nofollow ugc\">Free vs Paid\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>MalCare is the \u003Cstrong>fastest\u003C\u002Fstrong> malware detection and removal plugin loved by thousands of developers and agencies. With an industry-first \u003Cstrong>automatic one-click malware removal\u003C\u002Fstrong>, your WordPress website is clean before Google blacklists it or your web host takes it down. MalCare has been developed from the ground up after \u003Cstrong>analyzing over 240,000 websites over 2.5+ years\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Its \u003Cstrong>intelligent scanning methodology\u003C\u002Fstrong> will \u003Cstrong>never slow down your WordPress site\u003C\u002Fstrong> and \u003Cstrong>accurately identifies\u003C\u002Fstrong> the most complex malware that typically goes undetected in other popular WordPress security plugins.\u003C\u002Fp>\n\u003Cp>The \u003Cstrong>one-click malware cleaner\u003C\u002Fstrong> offers unlimited automated cleanups while the inbuilt \u003Cstrong>powerful cloud-based firewall\u003C\u002Fstrong> ensures round-the-clock website protection against spam attacks. Moreover, you can \u003Cstrong>block countries\u003C\u002Fstrong> to mitigate hack attacks.\u003C\u002Fp>\n\u003Cp>MalCare comes integrated with a \u003Cstrong>complete website management\u003C\u002Fstrong> module that ensures better WP security and site management to your websites from a single dashboard.\u003C\u002Fp>\n\u003Cp>The WP security plugin \u003Cstrong>notifies you if the WordPress site goes down\u003C\u002Fstrong> so that you can handle the situation before you start losing visitors. Performance Check enables WordPress users to keep an eye on their \u003Cstrong>loading speed\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>MalCare offers a premium \u003Cstrong>White-Label\u003C\u002Fstrong> solution that lets agencies provide better website security to their clients without risking their business. And enables users to \u003Cstrong>generate beautiful reports\u003C\u002Fstrong> for their clients.\u003C\u002Fp>\n\u003Ch3>Why Choose MalCare WordPress Security Plugin?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Ch4>WordPress Malware Scanner\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Cloud Based Deep malware scanner\u003C\u002Fli>\n\u003Cli>Doesn’t Slow down your WordPress site\u003C\u002Fli>\n\u003Cli>Detects malware BEFORE it’s too late\u003C\u002Fli>\n\u003Cli>NO impact on your website\u003C\u002Fli>\n\u003Cli>Finds ALL types of malware, even new & complex ones\u003C\u002Fli>\n\u003Cli>Get Alerts about Security Risks with our WordPress Vulnerability Scanner\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>WordPress Malware Removal\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>View hacked file details\u003C\u002Fli>\n\u003Cli>Cleans your site INSTANTLY, in less than 60 Secs\u003C\u002Fli>\n\u003Cli>Removes ALL traces of malware\u003C\u002Fli>\n\u003Cli>UNLIMITED hack cleanups\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>WordPress Website Protection\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Blocks hacker BOTS from attacking login page\u003C\u002Fli>\n\u003Cli>Identifies & blocks MALICIOUS traffic\u003C\u002Fli>\n\u003Cli>Enables users to HARDEN their WordPress sites\u003C\u002Fli>\n\u003Cli>Enables users to block ENTIRE countries\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Easy to Use\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Set up an account in 60 secs\u003C\u002Fli>\n\u003Cli>Configure security once & never look at it again\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Agile & responsive customer support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Why Is MalCare Such a Game-Changer?\u003C\u002Fh3>\n\u003Cp>MalCare offers unparalleled security services. Some services are free and others are paid.\u003C\u002Fp>\n\u003Ch4>MalCare’s FREE Services –\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\n\u003Ch4>Cloud-Based Malware Scanning (Free)\u003C\u002Fh4>\n\u003Cp>MalCare’s Cloud-based Scanning ensures no impact on your website ever. Moreover, it detects Complex Malware missed by other popular security plugins for WordPress.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Web-Application WordPress Firewall (Free)\u003C\u002Fh4>\n\u003Cp>Get Real-Time Protection for your WordPress website against the latest security threats with MalCare’s Smart Firewall. Block hackers & bots before they harm your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>CAPTCHA-Based Login Page Protection (Free)\u003C\u002Fh4>\n\u003Cp>Automatically prevent brute force attacks with MalCare’s Smart Captcha-Based Login Page Protection. Round-the-clock protection against malicious traffic.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>MalCare’s PAID Services –\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\n\u003Ch4>Viewing Hacked Files (Paid)\u003C\u002Fh4>\n\u003Cp>View the infected files present on your WordPress website. Learn which themes or plugins or files or folders were infected by hackers.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Industry-First Instant Malware Removal (Paid)\u003C\u002Fh4>\n\u003Cp>Clean your hacked site instantly in less than 60 secs with MalCare’s 1-Click Cleaner. Clean your website before Google blacklists it or your web host takes it down.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>WordPress Recommended Website Hardening (Paid)\u003C\u002Fh4>\n\u003Cp>Easily configure WordPress recommended best security practices with just 1-Click from right within MalCare’s dashboard. No technical knowledge needed.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Geo-blocking (Paid)\u003C\u002Fh4>\n\u003Cp>Restrict access to users based on their geographical location. Easily block all visitors from certain countries to mitigate the risk of being hacked.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Uptime Monitoring (Paid)\u003C\u002Fh4>\n\u003Cp>With MalCare’s Uptime Monitoring keep a steady eye on your WordPress site. It ensures that you are not oblivious to website downtime.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Common Hack Attacks Prevented By MalCare\u003C\u002Fh3>\n\u003Cp>MalCare protects websites against all common hack attacks which includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-brute-force\u002F\" rel=\"nofollow ugc\">Brute force attacks\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fjapanese-keyword-hack\u002F\" rel=\"nofollow ugc\">Japanese keyword hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-hacked-redirect\u002F\" rel=\"nofollow ugc\">WordPress redirect hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwhat-is-pharma-hack-how-to-clean-it\u002F\" rel=\"nofollow ugc\">Pharma hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fseo-spam\u002F\" rel=\"nofollow ugc\">SEO spam hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-theme-hacked\u002F\" rel=\"nofollow ugc\">WordPress theme hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fspam-link-injection-wordpress\u002F\" rel=\"nofollow ugc\">WordPress spam link injections\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Frevslider-exploit\u002F\" rel=\"nofollow ugc\">Revslider hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-timthumb\u002F\" rel=\"nofollow ugc\">TimThumb hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fadminer-php-hack\u002F\" rel=\"nofollow ugc\">Adminer.php hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fcross-site-scripting-xss-attacks-what-how-prevent-them\u002F\" rel=\"nofollow ugc\">XSS or cross-site scripting hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fhow-to-detect-and-remove-wp-vcd-malware-a-step-by-step-guide-and-a-bonus-plugin\u002F\" rel=\"nofollow ugc\">WP-VCD hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fpreventing-sql-injections\u002F\" rel=\"nofollow ugc\">SQL injection hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-malvertising\u002F\" rel=\"nofollow ugc\">WordPress malvertising hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fremove-google-blacklist-warning\u002F\" rel=\"nofollow ugc\">Google Blacklist hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fgoogle-adwords-account-suspended\u002F\" rel=\"nofollow ugc\">Google Adwords hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fsession-hijacking-cookie-stealing\u002F\" rel=\"nofollow ugc\">Cookie stealing & session hijacking\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fhow-to-remove-phishing\u002F\" rel=\"nofollow ugc\">WordPress phishing hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Ffavicon-ico-virus-wordpress\u002F\" rel=\"nofollow ugc\">Favicon.ico virus hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fremoving-wp-feed-php-malware\u002F\" rel=\"nofollow ugc\">WP-Feed.php & WP-Tmp.php\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fhow-to-scan-malware-and-backdoors-of-your-wordpress-site\u002F\" rel=\"nofollow ugc\">Backdoor hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fcoinhive-malware-wordpress\u002F\" rel=\"nofollow ugc\">Coinhive hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fdeface-wordpress\u002F\" rel=\"nofollow ugc\">WordPress deface hack\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>MalCare Free vs. MalCare Premium\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Ch4>Cloud Based Malware Scanner (FREE)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Cloud-Based Malware Scanning \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Deep Malware Scanning – Files & Database \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Website Firewall (FREE)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Web Application Firewall \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Plugin Based Firewall \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Rules update every 7 days \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Login Page Protection \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Bot Protection \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Rules update every 5 mins \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Geo-Blocking \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Website Hardening \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Instant Malware Removal (PAID)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>View Malware Insights \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Instant One-Click Clean Ups \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Automatic Clean-Ups \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Unlimited Clean-Ups \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Personalized Customer Support (Paid)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Support on WordPress forum \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Support via email and chat \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Who Can Benefit From MalCare?\u003C\u002Fh3>\n\u003Cp>MalCare is perfect for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Any WordPress Websites\u003C\u002Fli>\n\u003Cli>Small Business Websites\u003C\u002Fli>\n\u003Cli>Developer Websites\u003C\u002Fli>\n\u003Cli>Web Designing Websites\u003C\u002Fli>\n\u003Cli>eCommerce Stores\u003C\u002Fli>\n\u003Cli>Niche Sites\u003C\u002Fli>\n\u003Cli>Artists & Photographers Sites\u003C\u002Fli>\n\u003Cli>Amateur & Professional Bloggers\u003C\u002Fli>\n\u003Cli>Local Business Sites\u003C\u002Fli>\n\u003Cli>Website for Startups\u003C\u002Fli>\n\u003Cli>Websites Selling Courses\u003C\u002Fli>\n\u003Cli>Influencer Sites\u003C\u002Fli>\n\u003Cli>Web Hosting Companies\u003C\u002Fli>\n\u003Cli>Website Maintenance Services or Agencies\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Detailed Setup Step-by-Step Tutorials\u003C\u002Fh3>\n\u003Cp>This WordPress security plugin works in tandem with the \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\" rel=\"nofollow ugc\">MalCare\u003C\u002Fa> servers. MalCare servers do all the heavy processing and will alert you if your site has any security issues.\u003C\u002Fp>\n\u003Cp>Hence a MalCare account is needed to use the plugin. This account can also be used by our other products including \u003Ca href=\"https:\u002F\u002Fblogvault.net\" rel=\"nofollow ugc\">BlogVault\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmalcare.freshdesk.com\u002Fsupport\u002Fsolutions\u002Farticles\u002F35000055512-how-do-i-set-up-a-malcare-account-\" rel=\"nofollow ugc\">How to Set Up a MalCare Account?\u003C\u002Fa> (Help Doc)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=v8L_DZllk7k&list=\" rel=\"nofollow ugc\">How to Set Up a MalCare Account?\u003C\u002Fa> (Video)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>MalCare Full Security Features List\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Ch4>Cloud Based Malware Scanner\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Daily Scan Frequency\u003C\u002Fli>\n\u003Cli>On-demand Site Scans\u003C\u002Fli>\n\u003Cli>Scan Non-WP Files\u003C\u002Fli>\n\u003Cli>Does not slow down your website ever\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Instant Malware Removal\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>View Hacked Files details\u003C\u002Fli>\n\u003Cli>Instant Automatic Malware Removal\u003C\u002Fli>\n\u003Cli>Removal of Unknown & New Malware\u003C\u002Fli>\n\u003Cli>Unlimited Malware Removal\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Intelligent Malware Protection\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Web Application Firewall\u003C\u002Fli>\n\u003Cli>IP Whitelisting\u003C\u002Fli>\n\u003Cli>CAPTCHA-based Login Page Protection\u003C\u002Fli>\n\u003Cli>Traffic Logs\u003C\u002Fli>\n\u003Cli>Login Logs\u003C\u002Fli>\n\u003Cli>Geo-Blocking\u003C\u002Fli>\n\u003Cli>Alerts for Suspicious Logins\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Website Hardening\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Block PHP Execution in Untrusted Folders\u003C\u002Fli>\n\u003Cli>Disable Files Editor\u003C\u002Fli>\n\u003Cli>Block Plugin or Theme Installation\u003C\u002Fli>\n\u003Cli>Change Security Keys\u003C\u002Fli>\n\u003Cli>Reset All Passwords\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Complete Website Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Centralized Dashboard\u003C\u002Fli>\n\u003Cli>Plugins & Themes Management & Update\u003C\u002Fli>\n\u003Cli>User Management\u003C\u002Fli>\n\u003Cli>Team Management\u003C\u002Fli>\n\u003Cli>Client Management\u003C\u002Fli>\n\u003Cli>Generate & Schedule Reports\u003C\u002Fli>\n\u003Cli>White-Labeling Solution\u003C\u002Fli>\n\u003Cli>Uptime Monitoring\u003C\u002Fli>\n\u003Cli>Site Speed Monitoring\u003C\u002Fli>\n\u003Cli>Blacklist Alarm\u003C\u002Fli>\n\u003Cli>Slack Integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Email\u003C\u002Fli>\n\u003Cli>Chat\u003C\u002Fli>\n\u003Cli>Social Media\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Fans Are Raving About Us\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fvisualcomposer.com\u002Fblog\u002Fmalcare-review\u002F\" rel=\"nofollow ugc\">MalCare Review on VisualComposer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.elegantthemes.com\u002Fblog\u002Fresources\u002Fmalcare-security-and-firewall-the-right-security-plugin-for-your-site\" rel=\"nofollow ugc\">MalCare Review on ElegantThemes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fblog.weglot.com\u002Fideal-security-solution-malcare-review\u002F\" rel=\"nofollow ugc\">MalCare Review on Weglot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wpwhitesecurity.com\u002Fmalcare-wordpress-site-security-service-reviewed\u002F\" rel=\"nofollow ugc\">MalCare Review on WPWhiteSecurity\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=2yNIb4Pc_ig\" rel=\"nofollow ugc\">MalCare Reviews by WordPress Influencer Adam Preiser (Plus Real Malware Removal Demo)\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Connect With Our Team of Security Experts\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002FWordPressForWebCreators\u002F\" rel=\"nofollow ugc\">Join MalCare’s Facebook Community\u003C\u002Fa> – The purpose of the group is to enable Web Creators to gain valuable insights and help from community members which will be valuable to their business. So, if you are a WordPress user & want to keep up with the latest industry news and get help for your business, \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002FWordPressForWebCreators\u002F\" rel=\"nofollow ugc\">join us\u003C\u002Fa>!\u003C\u002Fp>\n\u003Ch3>Don’t Know Where to Getting Started? Start From Here –\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmalcare.freshdesk.com\u002Fsupport\u002Fsolutions\u002Farticles\u002F35000055512-how-do-i-set-up-a-malcare-account-\" rel=\"nofollow ugc\">How to Setup MalCare Account?\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002FWordPressForWebCreators\u002F\" rel=\"nofollow ugc\">Join MalCare Facebook Group MalCare\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fchannel\u002FUC5oQAXXvndQJuyVrWgMRWqg\" rel=\"nofollow ugc\">MalCare Tutorial Videos\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmalcare.freshdesk.com\u002Fsupport\u002Fhome\" rel=\"nofollow ugc\">User Help Documentations\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Ffaq\u002F\" rel=\"nofollow ugc\">Frequently Asked Questions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmalcare.freshdesk.com\u002Fsupport\u002Ftickets\u002Fnew\" rel=\"nofollow ugc\">Support for MalCare Users\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>MalCare vs. Others\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.codeinwp.com\u002Fblog\u002Fsucuri-vs-wordfence-vs-malcare\u002F\" rel=\"nofollow ugc\">MalCare vs Sucuri vs Wordfence by CodeinWP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpmayor.com\u002Fmalcare-sucuri-wordfence-sitelock-ithemes-security-comparison\u002F\" rel=\"nofollow ugc\">MalCare vs Sucuri vs Wordfence vs SiteLock vs iThemes Security by WPMayor\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.",200000,17563155,86,520,"2026-03-23T09:11:00.000Z","4.0","7.0",[53,54,55,56,22],"firewall","malware-removal","malware-scanner","vulnerabilities","https:\u002F\u002Fwww.malcare.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmalcare-security.zip",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":14,"requires_at_least":72,"requires_php":73,"tags":74,"homepage":77,"download_link":78,"security_score":79,"vuln_count":80,"unpatched_count":11,"last_vuln_date":81,"fetched_at":27},"quttera-web-malware-scanner","Quttera ThreatSign – Web Malware Scanner for WordPress","4.0.0.12","quttera","https:\u002F\u002Fprofiles.wordpress.org\u002Fquttera\u002F","\u003Cp>Quttera ThreatSign protects your WordPress website with multi-layered security:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Malware Detection:\u003C\u002Fstrong> Powered by Quttera’s AI-driven heuristic engine, the scanner detects malicious PHP, obfuscated JavaScript, hidden iframes, redirects, spam, SEO malware, and credit-card skimmers targeting checkout pages. The plugin performs on-demand scans directly from your WordPress admin and checks your domain against more than 40 global security authorities, including Google, McAfee, Norton, and Yandex. Detection capabilities are continuously enhanced using insights from Quttera’s worldwide threat intelligence network.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Brute Force Protection:\u003C\u002Fstrong> Prevents unauthorized login attempts with IP locking, configurable rate limiting, and environment-aware protection policies. Supports both shared hosting (aggressive locking) and dedicated servers (progressive delays). Includes emergency bypass mechanism for critical situations.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Bot Protection:\u003C\u002Fstrong> Layered defense against automated attacks using multi-stage risk evaluation, token-bucket rate limiting, and legitimate bot recognition (Googlebot, Bingbot, etc.). Protects REST API, XML-RPC, and WooCommerce endpoints with endpoint-specific risk scoring.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Admin User Monitoring:\u003C\u002Fstrong> Real-time detection and alerting for unauthorized admin additions, removals, and role changes with database audit trail and snapshots.\u003C\u002Fp>\n\u003Cp>For complete protection—including automated malware removal, scheduled scanning, WAF, and 24\u002F7 monitoring—you can upgrade to a ThreatSign Website Security plan.\u003C\u002Fp>\n\u003Ch4>Malware Detection Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>One-click on-demand scans from WP admin\u003C\u002Fli>\n\u003Cli>0-day (unknown threat) detection via heuristic & behavioral analysis\u003C\u002Fli>\n\u003Cli>Detection of malicious PHP (backdoors, shells, injections)\u003C\u002Fli>\n\u003Cli>Detection of obfuscated or polymorphic JavaScript\u003C\u002Fli>\n\u003Cli>Identification of malicious iframes, redirects & hidden links\u003C\u002Fli>\n\u003Cli>Detection of spam & SEO malware\u003C\u002Fli>\n\u003Cli>Checkout skimmer detection\u003C\u002Fli>\n\u003Cli>Inspection of WordPress core file integrity\u003C\u002Fli>\n\u003Cli>Detection of alien or unauthorized files in core directories\u003C\u002Fli>\n\u003Cli>External links and outbound reference analysis\u003C\u002Fli>\n\u003Cli>Blacklist checks across 40+ security authorities\u003C\u002Fli>\n\u003Cli>Cloud-based scanning to reduce server resource load\u003C\u002Fli>\n\u003Cli>Detailed investigation reports with severity levels\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Brute Force Protection Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>IP-based locking with configurable thresholds\u003C\u002Fli>\n\u003Cli>Multi-stage failure detection with soft and hard locks\u003C\u002Fli>\n\u003Cli>Environment-aware policies for shared hosting and dedicated servers\u003C\u002Fli>\n\u003Cli>IP whitelist\u002Fblacklist with CIDR notation support\u003C\u002Fli>\n\u003Cli>Emergency bypass mechanism via constant or filter\u003C\u002Fli>\n\u003Cli>User account lockout alerts via email\u003C\u002Fli>\n\u003Cli>Combo-lock (IP + username) detection\u003C\u002Fli>\n\u003Cli>Rate limiting with progressive delays\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Bot Protection Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Multi-stage risk evaluation with heuristic analysis\u003C\u002Fli>\n\u003Cli>Token-bucket rate limiting across multiple lanes (global, REST, XML-RPC, checkout, cart)\u003C\u002Fli>\n\u003Cli>Legitimate bot recognition (Googlebot, Bingbot with elevated rate limits)\u003C\u002Fli>\n\u003Cli>REST API enumeration and authentication protection\u003C\u002Fli>\n\u003Cli>WooCommerce endpoint protection (checkout & cart)\u003C\u002Fli>\n\u003Cli>Configurable operation modes (Observe, Balanced, Aggressive)\u003C\u002Fli>\n\u003Cli>Risk-based challenge mechanisms and exponential backoff\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Admin User Monitoring Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Real-time detection of admin user additions and removals\u003C\u002Fli>\n\u003Cli>Admin role change tracking\u003C\u002Fli>\n\u003Cli>Database snapshot comparison for audit trail\u003C\u002Fli>\n\u003Cli>WP-Cron scheduled checks (1-minute intervals)\u003C\u002Fli>\n\u003Cli>Immediate detection via WordPress hooks\u003C\u002Fli>\n\u003Cli>Email alerts for unauthorized changes\u003C\u002Fli>\n\u003Cli>Comprehensive alarm system integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you need malware removal assistance, contact us at support@quttera.com or sign up for any\u003Cbr \u002F>\nof our ThreatSign annual plans, which include cleanup & blacklist removal:\u003Cbr \u002F>\nhttps:\u002F\u002Fquttera.com\u002Fanti-malware-website-monitoring-signup\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fquttera.com\" rel=\"nofollow ugc\">Quttera\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Plugin’s other home\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fquttera.com\u002Fwordpress-malware-scanner\" rel=\"nofollow ugc\">WordPress Malware Scanner\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","WordPress multi-level security scanner detecting malware, 0-day threats, brute-force attacks, bot attacks, and unauthorized admin changes.",10000,4472334,78,47,"2026-04-16T00:02:00.000Z","3.3.2","7.2",[75,54,55,76,22],"card-skimmer","threat-detection","http:\u002F\u002Fquttera.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquttera-web-malware-scanner.4.0.0.12.zip",98,3,"2025-08-14 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":92,"num_ratings":93,"last_updated":94,"tested_up_to":14,"requires_at_least":95,"requires_php":23,"tags":96,"homepage":99,"download_link":100,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"cwis-antivirus-malware-detected","WebDefender Security – Protection & AntiSpam","5.0.2.1","CobWeb Security Ltd.","https:\u002F\u002Fprofiles.wordpress.org\u002Fcwis\u002F","\u003Ch4>A Professional Security Protection Plugin for WP\u003C\u002Fh4>\n\u003Cp>The WebDefender was developed by a team of security experts and it incorporates professional security tools for the best all around WordPress website protection and prevention of threats. Includes GDPR compline module.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Smart Protection \u002F Website Hide Function (Prevent Hacker Attack \u002F Security) \u002F Anti-Spam Protection \u002F Brute Force Bot Attack Prevention \u002F Smart Firewall\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detection \u002F Antivirus Scanner \u002F Database Malware \u002F Adware, Spyware, Spam Links\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Diagnostic \u002F Vulnerabilities Detection \u002F Blacklist Monitoring\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Built-in Malware Removal Tool \u002F Security Cleaning Tool\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security Hardening \u002F Hosting Hardening Check \u002F Automatic Updating Function\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GDPR Tools \u002F GDPR Compliance Function\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All of these solution make the WebDefender one of the best all around security protection tools for your WordPress resource.\u003C\u002Fp>\n\u003Ch3>The WebDefender offers the following tools and protection measures\u003C\u002Fh3>\n\u003Ch4>Primary Protection Function\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Website Hide function\u003C\u002Fstrong> that hides your WP site from crawlers spiders and bots.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hides website from bots, hides the core WP website components, plugins and themes.\u003C\u002Fli>\n\u003Cli>Fully automatic encryption of your website components.\u003C\u002Fli>\n\u003Cli>Coding website without use of the .htaccess file.\u003C\u002Fli>\n\u003Cli>One click installation.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Security Protection Functions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Smart Firewall\u003C\u002Fstrong> that detects and blocks bot traffic. This is a perfect and powerful prevention tool.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anti-Bot Protection\u003C\u002Fstrong> – Monitors web traffic, filters out, and blocks bad bot traffic to a website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anti-SPAM Protection\u003C\u002Fstrong> – Automatic detection of all comments insert by bots and their filtration.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Brute Force Bot Attack Prevention\u003C\u002Fstrong> – Bots detection system to prevent attempts to crack a password (login security).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Antivirus Security Scanner\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>A professional \u003Cstrong>Antivirus Scanner\u003C\u002Fstrong> that will scan your website from external threats. Designed to detect adware and malware, backdoors, exploits, phishing code, trojans and viruses, include built-in \u003Cstrong>malware removal tool\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database Malware Scanning\u003C\u002Fstrong> – A unique ability of our algorithm is scanning the website’s database. This function crucial as more and more hackers use SQL injection to infect the websites with malware.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Adware, Spyware and SPAM links detection\u003C\u002Fstrong> – Protect you website from attached code attacks.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Vulnerabilities Detection\u003C\u002Fstrong> – Plugins and themes security vulnerabilities, SQL, XSS injections, vulnerable and insecure scripts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Blacklist Monitoring\u003C\u002Fstrong> – Check your website reputation.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Security Hardening\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Updater\u003C\u002Fstrong> – an automatic functional tool for updating your WordPress Core versions, plugins and themes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hardening\u003C\u002Fstrong> – Detect the hosting configuration security parameter.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Malware Removal Tool\u003C\u002Fh4>\n\u003Cp>Built-in file viewer and editor is an easy to use security cleaning tool for the removal of infected codes or its part depending on the type of infection.\u003C\u002Fp>\n\u003Ch4>GDPR Compliance Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>GDPR Consent management\u003C\u002Fli>\n\u003Cli>Cookies and data collection privacy management\u003C\u002Fli>\n\u003Cli>User data management\u003C\u002Fli>\n\u003Cli>Privacy information should we provide to user\u003C\u002Fli>\n\u003Cli>Personal data breaches\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Companies that collect data on citizens in European Union (EU) countries will need to comply with strict new rules around protecting customer data by May 25, 2018. The General Data Protection Regulation (GDPR) is expected to set a new standard for consumer rights regarding their data, but companies will be challenged as they put systems and processes in place to comply.\u003C\u002Fp>\n\u003Cp>Compliance will cause some concerns and new expectations of security teams. For example, the GDPR takes a wide view of what constitutes personal identification information. Companies will need the same level of protection for things like an individual’s IP address or cookie data as they do for name, address and Social Security number.\u003C\u002Fp>\n\u003Cp>This plugin is meant to assist a Controller, Data Processor, and Data Protection Officer (DPO) with efforts to meet the obligations and rights enacted under the GDPR.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NOTE:\u003C\u002Fstrong> Installing this plugin does not guarantee a full compliment with the GDPR. Please contact a GDPR consultant or a law firm to assess the necessary measures.\u003C\u002Fp>\n\u003Ch3>Technical Description\u003C\u002Fh3>\n\u003Ch4>Hide Function – Perfect Security and Protection solution\u003C\u002Fh4>\n\u003Cp>A passive security mechanism for hack protection against crawlers spiders and bots. A fullprof function – one click and your website will become hidden from bots.\u003C\u002Fp>\n\u003Cp>The Hider algorithm encrypts all layers of a website, thus hiding it from hackers by making existing vulnerabilities and other security risks invisible when searched and does not require manual configuration. Our encoding algorithm does not use the .htaccess file therefore there is no disruption to the operation of your website. This function will make your WordPress website totally invisible! A crucial step in improving your website security.\u003C\u002Fp>\n\u003Ch4>Smart Protection\u003C\u002Fh4>\n\u003Cp>A web application firewall filters, monitors, and blocks bad bot traffic to a website. It is deployed in “front” of a website and analyzes traffic – detecting and blocking anything malicious.\u003C\u002Fp>\n\u003Ch4>Anti SPAM\u003C\u002Fh4>\n\u003Cp>WebDefender includes a unique automatic algorithm for diagnosing the text entered on your website (forum, forms, comments and etc,) where made by a human or a bot. Bots won’t be allowed to enter text on your website. This is a unique algorithm, providing a unique solution to our clients.\u003Cbr \u002F>\nThe crisis is a time when almost every site is faced with a flurry of unwanted emails from reverse forms, posts and comments. Robots literally attack corporate e-mails, because of which sometimes valuable applications can be missed. But putting a captcha on the site you risk losing customer loyalty, as poorly readable images annoy 90% of users. Therefore, we offer a solution developed by WEbdefender specialists to protect the site from spam robots .\u003C\u002Fp>\n\u003Ch4>Brute Force Attack Protection\u003C\u002Fh4>\n\u003Cp>Hackers frequently use automatic bot systems to Brute force a website. Our algorithm detects those bots and prevents attempts of a password crack.\u003C\u002Fp>\n\u003Ch4>The “WebDefender” Antivirus Scanner\u003C\u002Fh4>\n\u003Cp>The builtin professional and multi-functional antivirus scanner offers top of the line security features and advanced functions for viruses and vulnerabilities detection. The scanner incorporates a user friendly malware removal tool. The diagnostic is performed by using a known database of virus signatures as well as Cobweb-Security’s Heuristic algorithm that can detected previously unknown virus signatures and zero-day vulnerabilities thus providing enterprise-level security capabilities.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WebDefender Antivirus Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Virus and malware antivirus scanner\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database security scanning (exclusive function)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>ZIP file scanning (exclusive function)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Adware, Spyware and SPAM links detection\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Powerful and easy to use malware removal tool\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security hardening analytics and recommendations\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time malware signature updates (Professional or Premium)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scanner scheduler’s settings (Professional or Premium)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Database Malware Scanning\u003C\u002Fh4>\n\u003Cp>An unique ability of our algorithm is scanning the website’s database. This function crucial as more and more hackers use SQL injection to infect the websites with malware.\u003C\u002Fp>\n\u003Ch4>Adware, Spyware and SPAM links detection\u003C\u002Fh4>\n\u003Cp>The WebDefender Scanner successfully detects:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>SEO & SPAM links\u003C\u002Fli>\n\u003Cli>Doorway pages (SEO)\u003C\u002Fli>\n\u003Cli>iFrame injections\u003C\u002Fli>\n\u003Cli>Black-hat SEO infections\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Vulnerabilities Detection\u003C\u002Fh4>\n\u003Cp>One of the most important parts of your website security and protection is a well-timed analysis for plugin, CMS and database vulnerabilities. These security vulnerabilities are an easy way for a hacker to crawl into your website. That’s why a well-timed diagnosis and update are vital for hardening the protection of the website.\u003C\u002Fp>\n\u003Cp>Our security scanner is able to find:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Plugins and themes vulnerabilities\u003C\u002Fli>\n\u003Cli>SQL, XSS malicious injections\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Blacklist Monitoring\u003C\u002Fh4>\n\u003Cp>The WebDefenders’ Blacklist Monitoring scanner checks IP addresses and website domains in the 10  most popular security blacklists and safe browsing databases.\u003C\u002Fp>\n\u003Cp>Real-time Blacklists or Blackhole lists – also called DNS-based Blackhole Lists – are lists of IP addresses published through DNS. Often there are listed computers or networks that may spam or consist malware in such lists. Many secure corporate mail servers are configured to reject or flag messages which have been sent from IP addresses listed in one of these security blacklists.\u003C\u002Fp>\n\u003Cp>Leading email systems like Gmail, Yahoo and Hotmail also use security blacklists to filter emails by addresses. If your network’s IP addresses end up in a blacklist, you and your customers can experience problems sending and receiving emails. It can significantly damage your business.\u003C\u002Fp>\n\u003Cp>WebDefender Blacklist Monitoring scanner will automatically alert you if your website addresses or domains become listed in any of the widely used URL blacklists.\u003C\u002Fp>\n\u003Ch4>The Updater – WP Core, plugin and theme automatic update\u003C\u002Fh4>\n\u003Cp>The importance of using the latest updated version of the WP core, plugins and themes is understandable to everyone and not only for the increase in functionality but in no small degree for the security of the website.\u003C\u002Fp>\n\u003Cp>To make it easier to keep track of update releases for WordPress Core, plugins and themes and installing them automatically, CobWeb-Security has introduced the Security Updater to the functionality of the WebDefender plugin.\u003C\u002Fp>\n\u003Cp>The Updater will enable you to keep track of:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress Core Updates\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress Plugin Updates\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress Theme Updates\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The Updater has three separate blocks for managing themes, plugins, and WordPress core settings.\u003C\u002Fp>\n\u003Cp>You can choose to update only individual plugins or themes or you can choose to update all of the installed themes and plugins. The Updater will also mark with different colors the importance of an update ( red to green)\u003C\u002Fp>\n\u003Ch4>Security Hardening\u003C\u002Fh4>\n\u003Cp>This function detects the hosting configuration security parameters.\u003C\u002Fp>\n\u003Ch4>Malware Removal Tool, Powerful & Easy To Use\u003C\u002Fh4>\n\u003Cp>The WebDefender Security Scanner will not only help you find all of the viruses and malicious code on your website but we will also help you remove the malware easily. Our built-in file viewer and editor is an easy to use security cleaning tool for the removal of infected codes or its part depending on the type of infection. The cleaning process is fairly simple, but it requires some knowledge in coding.\u003C\u002Fp>\n\u003Ch4>Preparing you website for the General Data Protection Regulation (GDPR)\u003C\u002Fh4>\n\u003Cp>This extension for our security plugin helps the website owner or company Data Protection Officer (DPO), Controller, Data Processor employees to fit the web application with the obligations and rights enacted under the GDPR requirement.\u003C\u002Fp>\n\u003Ch4>Professional Upgrade\u003C\u002Fh4>\n\u003Cp>Enhance the security of your website with our Professional upgrade. The Professional package will provide our clients with these additional features:\u003C\u002Fp>\n\u003Col>\n\u003Cli>FireWall:\n\u003Cul>\n\u003Cli>Real-time firewall rules updates\u003C\u002Fli>\n\u003Cli>Real-time IP Blacklists\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Hide Function:\n\u003Cul>\n\u003Cli>New mask codes for updating the Hide function online\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Scanner:\n\u003Cul>\n\u003Cli>Real-time malware signature updates\u003C\u002Fli>\n\u003Cli>Scanner scheduler settings (Professional or Premium)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Premium Program\u003C\u002Fh4>\n\u003Cp>We also offer a Professional WebDefender key that will give you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Scanner scheduler’s settings\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Upgrade to Premium support\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database malware scan (WebDefender exclusive function)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scanner report export function\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>A 100% protection – your website’s security in our hands. Our team will monitor your website online 24\u002F7, in case of a hacker attack or malware injection, we will clean and repair you website.\u003C\u002Fp>\n\u003Cp>You can \u003Ca href=\"http:\u002F\u002Fcobweb-security.com\u002Four-product\u002F\" title=\"Fix and protect your site\" rel=\"nofollow ugc\">click here to sign-up\u003C\u002Fa> for WebDefender Professional or Premium now.\u003C\u002Fp>\n\u003Ch4>Cookies set by the Plugin and WordPress\u003C\u002Fh4>\n\u003Cp>This plugin keeps track of user consent by saving them to the database. We can only do that for logged in users. For visitors, however, we track their concent by creating a cookie and storing their preferences there. The same logic applies for cookies. We set a cookie named \u003Cstrong>gdpr\u003C\u002Fstrong> that stores that information.\u003C\u002Fp>\n\u003Cp>WordPress also stores cookies on log in or commenting on a post. You can learn more about \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FWordPress_Cookies\" rel=\"nofollow ugc\">WordPress cookies here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to several external services provided by Cobweb Security in order to deliver antivirus and malware scanning functionality.\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>CWIS Version Check Service\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fupdate.cobweb-security.com\u002Freleases\u002Fversion.json\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose:\u003C\u002Fstrong> Used to check the latest plugin version and update information.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> Only the plugin version installed is sent.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Service & Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.cobweb-security.com\u002Fprivacy\" rel=\"nofollow ugc\">Cobweb Security Terms & Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>CWIS Licensing API\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fclients.cobweb-security.com\u002Fmodules\u002Fservers\u002Fcwislicensing\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose:\u003C\u002Fstrong> Validates the plugin license and ensures legitimate usage.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> Plugin license key and site domain.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Service & Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.cobweb-security.com\u002Fprivacy\" rel=\"nofollow ugc\">Cobweb Security Terms & Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>CWIS Host Check Service\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fcheck.cobweb-security.com\u002F\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose:\u003C\u002Fstrong> Performs security checks and retrieves signature updates.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> Site domain and plugin environment info.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Service & Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.cobweb-security.com\u002Fprivacy\" rel=\"nofollow ugc\">Cobweb Security Terms & Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>CWIS Signature Updates\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fupdate.cobweb-security.com\u002Freleases\u002Fcwis-signatures.json\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose:\u003C\u002Fstrong> Retrieves malware signature updates for scanning.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> No personal data is sent; only plugin requests for the latest signatures.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Service & Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.cobweb-security.com\u002Fprivacy\" rel=\"nofollow ugc\">Cobweb Security Terms & Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>These services are necessary for the proper operation of the plugin. No sensitive user data is sent without consent, and all external connections are limited to the above services.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fdownload\u002F\" title=\"Download WordPress\" rel=\"ugc\">WordPress\u003C\u002Fa> version \u003Cstrong>2.8\u003C\u002Fstrong> or higher\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsecure.php.net\u002F\" title=\"PHP scripting language\" rel=\"nofollow ugc\">PHP\u003C\u002Fa> version \u003Cstrong>4.1.0\u003C\u002Fstrong> or higher\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Final Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>We’re greatly appreciate for any references in the social networks, forums or blogs to our security scanner \u003Ca href=\"https:\u002F\u002Fcobweb-security.com\u002Fpages\u002Ffree-website-antivirus\u002F\" title=\"CobWeb Security Ltd.\" rel=\"nofollow ugc\">https:\u002F\u002Fcobweb-security.com\u002Fpages\u002Ffree-website-antivirus\u002F\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>If you have any suggestions, ideas, or comments, or if you found a bug, write us \u003Ca href=\"mailto:cwis@cobweb-security.com\" title=\"Email us\" rel=\"nofollow ugc\">cwis@cobweb-security.com\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","PRO Security – Antivirus Scanner, 2-Layer Protection Hide Security, Brute Force Security  & Antispam, Security Website and Security Hardening.",1000,274051,80,18,"2026-01-20T06:00:00.000Z","2.8",[55,97,21,98,22],"protection","security-plugin","https:\u002F\u002Fcobweb-security.com\u002Fpages\u002Ffree-website-antivirus\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcwis-antivirus-malware-detected.zip",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":90,"downloaded":109,"rating":110,"num_ratings":111,"last_updated":112,"tested_up_to":14,"requires_at_least":113,"requires_php":114,"tags":115,"homepage":120,"download_link":121,"security_score":79,"vuln_count":32,"unpatched_count":11,"last_vuln_date":122,"fetched_at":27},"sitelock","SiteLock Security – WP Hardening, Login Security & Malware Scans","5.1.1","SiteLock","https:\u002F\u002Fprofiles.wordpress.org\u002Fsitelocksecurity\u002F","\u003Cblockquote>\n\u003Cp>\u003Cstrong>🌟 Completely redesigned in Version 5.0 — now even stronger with 2FA in 5.1 🌟\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The SiteLock WordPress plugin was recently rebuilt with three goals: make it faster, make it clearer and move the heavy work to the cloud. We built a cloudfirst architecture, modernized UI, expanded security controls and stripped out everything that didn’t need to be there. Our latest 5.1 release builds on that foundation with TwoFactor Authentication (2FA) to strengthen login security and give you tighter control over access.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>The big changes:\u003C\u002Fstrong>\u003Cbr \u002F>\n  – 🔒 Enhanced WordPress-specific hardening and login security controls\u003Cbr \u002F>\n  – ☁️ Cloud-powered scanning architecture for zero performance impact\u003Cbr \u002F>\n  – 🩺 New Site Health interface that shows you what matters in one view\u003Cbr \u002F>\n  – ⚡ Streamlined controls (fewer clicks to get protected)\u003Cbr \u002F>\n  – ✨ Modern codebase built for the WordPress you’re actually using today\u003Cbr \u002F>\n  – 🔢 Two-Factor Authentication (2FA) now available for stronger login protection\u003C\u002Fp>\n\u003Cp>If you used the old plugin: this is a different tool. If you’re new: you’re starting with the cleanest, fastest version of the plugin.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Your website deserves protection that’s simple, fast and built for WordPress. SiteLock WordPress Security focuses on the everyday controls that matter most and helps you establish a secure baseline in minutes — WordPress-specific hardening, login protection with Two-Factor Authentication (2FA) and a clear Site Health dashboard that keeps you in control without slowing your site down. It’s lightweight, action-first protection that complements your host defenses: essential safeguards run inside WordPress while deeper checks happen securely in the SiteLock cloud. Skip heavy on-server scans and alert fatigue — run on-demand checks when you need extra assurance, so you can ship updates with confidence.\u003C\u002Fp>\n\u003Ch4>Security that grows with you\u003C\u002Fh4>\n\u003Cp>Our goal is straightforward: maintain a strong baseline with minimal overhead while giving you clear visibility and room to grow as your needs evolve.\u003Cbr \u002F>\nAnd because security is never static, this plugin keeps pace. Two-Factor Authentication (2FA) is now available to strengthen login security with an extra layer of protection.\u003C\u002Fp>\n\u003Ch4>Commercial plugin\u003C\u002Fh4>\n\u003Cp>This plugin is free but offers additional paid commercial upgrades or support.\u003C\u002Fp>\n\u003Ch3>What’s included\u003C\u002Fh3>\n\u003Ch4>WordPress Hardening: Cut common attack paths in just a few clicks\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Disable directory listing\u003C\u002Fli>\n\u003Cli>Restrict PHP execution in upload folders\u003C\u002Fli>\n\u003Cli>Limit unsafe script types\u003C\u002Fli>\n\u003Cli>Force strong configuration defaults to close risky gaps\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>All options are toggle-based and reversible — safe to enable, easy to test and lightweight on performance.\u003C\u002Fem>\u003C\u002Fp>\n\u003Ch4>Login Security: Protect what matters most — your access\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Two-Factor Authentication (2FA)\u003C\u002Fstrong>: Add a second layer of verification to protect admin access\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Brute-force defense\u003C\u002Fstrong>: Blocks repeated failed logins and temporarily locks abusive IPs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Password policy prompts\u003C\u002Fstrong>: Encourage stronger credentials without breaking workflows\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Session timeouts\u003C\u002Fstrong>: Automatically end idle sessions to prevent account hijacks\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Activity awareness\u003C\u002Fstrong>: View recent logins and admin changes in the \u003Cstrong>Activity Log\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Site Health & Cloud Checks: Clarity without noise\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Site Health Dashboard\u003C\u002Fstrong>: Surface key signals in one view — WordPress hardening status, last scan timestamp and actionable indicators\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cloud Checks\u003C\u002Fstrong>: Connect your free SiteLock account to enable recurring off-server checks (Webpage Scan, SSL Verification, Email Reputation and more)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scan Now\u003C\u002Fstrong>: Run on-demand checks after updates or changes for instant assurance — no heavy, always-on local scanners\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Activity Log\u003C\u002Fstrong>: Track what’s happening across your WordPress admin. See admin\u002Flogin events at a glance making it easy to spot anomalies early and keep accountability clear\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Why Choose SiteLock WordPress Security?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Lightweight by design\u003C\u002Fstrong>: All high-impact protections, no unnecessary load\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real visibility\u003C\u002Fstrong>: Know your security posture in seconds with Site Health\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cloud-powered assurance\u003C\u002Fstrong>: Checks run off-server, protecting performance\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible setup\u003C\u002Fstrong>: Use standalone or connect a SiteLock account for added layers\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Strong login protection\u003C\u002Fstrong>: Two-Factor Authentication (2FA) alongside brute-force defense and session controls\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Trusted heritage\u003C\u002Fstrong>: From the global leader in SMB website security backed by continuous innovation and research\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Aligned to WordPress\u003C\u002Fstrong>: Designed to stay out of your way and keep performance priorities intact\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Who It’s For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Small businesses & startups\u003C\u002Fli>\n\u003Cli>Portfolio & personal brand sites\u003C\u002Fli>\n\u003Cli>WooCommerce shops & small e-commerce\u003C\u002Fli>\n\u003Cli>Agencies & website maintenance services\u003C\u002Fli>\n\u003Cli>Freelance developers & web designers\u003C\u002Fli>\n\u003Cli>Bloggers, creators & publishers\u003C\u002Fli>\n\u003Cli>Community & membership sites\u003C\u002Fli>\n\u003Cli>Nonprofits & educational sites\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>If you manage a WordPress website, SiteLock gives you confidence and control whether you run one site or hundreds.\u003C\u002Fem>\u003C\u002Fp>\n\u003Ch4>Can I Fix an Already-Infected Site with This Plugin?\u003C\u002Fh4>\n\u003Cp>The plugin focuses on prevention, posture and visibility — not full malware removal. It isn’t designed to fully clean up sites that were infected before it was active.\u003Cbr \u002F>\nIf your site is already compromised, act quickly, we recommend:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Restoring from a clean backup if available\u003C\u002Fli>\n\u003Cli>Remove malicious files manually or with professional help\u003C\u002Fli>\n\u003Cli>For urgent assistance, consider \u003Ca href=\"https:\u002F\u002Fwww.sitelock.com\u002Fproducts\u002Ffix-hacked-site\u002F\" rel=\"nofollow ugc\">SiteLock 911 – Emergency Malware Removal\u003C\u002Fa> for rapid cleanup\u003C\u002Fli>\n\u003Cli>For ongoing defense, consider \u003Ca href=\"https:\u002F\u002Fwww.sitelock.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">choosing a comprehensive SiteLock plan\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Don’t Know Where To Start? Try This\u003C\u002Fh4>\n\u003Cp>Here are common first moves teams take with SiteLock. Order isn’t enforced — choose what fits your site and workflow:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enable WordPress hardening that matches your hosting and theme setup\u003C\u002Fli>\n\u003Cli>Turn on Login Security controls: brute-force lockouts, session timeouts, and password-hygiene prompts\u003C\u002Fli>\n\u003Cli>Connect a free SiteLock account, then use Scan Now to run an on-demand check after plugin\u002Ftheme updates\u003C\u002Fli>\n\u003Cli>Review the Activity Log after major changes to spot unexpected admin\u002Flogin events quickly\u003Cbr \u002F>\nMake one change at a time, validate and roll back any toggle that conflicts with your stack.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Need Help with Setup or Fixes?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Visit \u003Ca href=\"https:\u002F\u002Fwww.sitelock.com\u002Fhelp-center\u002F?topics=wordpress-plugin\" rel=\"nofollow ugc\">Help Center – WordPress\u003C\u002Fa> for plugin specific help\u003C\u002Fli>\n\u003Cli>For broader topics explore the \u003Ca href=\"https:\u002F\u002Fwww.sitelock.com\u002Fhelp-center\u002F\" rel=\"nofollow ugc\">SiteLock Help Center\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Security\u003C\u002Fh4>\n\u003Cp>Protecting our customers and systems is a top priority, and we take security very seriously. If you believe you’ve found a security vulnerability in the SiteLock WordPress plugin, please let us know at vuln-reporting@sitelock.com before sharing any details publicly.\u003C\u002Fp>\n","Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.",50150,68,14,"2026-04-07T18:44:00.000Z","3.8","8.0",[116,117,118,119,22],"login-security","malware-scan","site-health","vulnerability-scanner","https:\u002F\u002Fwww.sitelock.com\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsitelock.5.1.1.zip","2026-01-25 00:00:00",{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":11,"num_ratings":11,"last_updated":133,"tested_up_to":14,"requires_at_least":134,"requires_php":16,"tags":135,"homepage":137,"download_link":138,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"lumiverse-security-watchdog-lite","Lumiverse Security Watchdog Lite","1.1.3","Lumiverse Dynamic","https:\u002F\u002Fprofiles.wordpress.org\u002Fbestseogr\u002F","\u003Ch4>Lumiverse Security Watchdog Lite\u003C\u002Fh4>\n\u003Cp>Lumiverse Security Watchdog Lite is a lightweight background security scanner for WordPress that helps you detect early signs of compromise.\u003C\u002Fp>\n\u003Cp>It monitors:\u003Cbr \u002F>\n* Changed .js files inside wp-content and scans them for known malware signatures\u003Cbr \u002F>\n* New and deleted plugins (plugin folder monitoring)\u003Cbr \u002F>\n* New administrator accounts and suspicious admin indicators\u003Cbr \u002F>\n* Suspicious option entries in the database (often used by hidden admin backdoors)\u003C\u002Fp>\n\u003Cp>When something suspicious is detected, it can send an email report so you can react quickly.\u003C\u002Fp>\n\u003Ch4>Security Hardening (Lite)\u003C\u002Fh4>\n\u003Cp>Lite includes practical hardening toggles that reduce common attack surfaces:\u003Cbr \u002F>\n* Disable XML-RPC (useful when you don’t need pingbacks or remote publishing)\u003Cbr \u002F>\n* Disable the WordPress file editor (prevents editing plugin\u002Ftheme files from wp-admin)\u003Cbr \u002F>\n* Block comments sitewide (front-end + admin UI)\u003C\u002Fp>\n\u003Ch4>Pro Version (Coming Soon)\u003C\u002Fh4>\n\u003Cp>Security Watchdog PRO is coming soon with additional security features, deeper scanning, and more advanced protections.\u003C\u002Fp>\n","Lightweight background security monitoring for WordPress. Detects suspicious changes and alerts you by email. Includes hardening options like disablin …",40,201,"2026-01-29T17:58:00.000Z","6.0",[18,136,20,21,22],"monitoring","https:\u002F\u002Flumiverse.gr\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flumiverse-security-watchdog-lite.1.1.3.zip",{"attackSurface":140,"codeSignals":202,"taintFlows":225,"riskAssessment":226,"analyzedAt":232},{"hooks":141,"ajaxHandlers":185,"restRoutes":199,"shortcodes":200,"cronEvents":201,"entryPointCount":80,"unprotectedCount":11},[142,148,153,158,163,169,173,178,182],{"type":143,"name":144,"callback":145,"file":146,"line":147},"filter","cron_schedules","bbmg_add_cron_schedules","brandbees-malware-guardian.php",150,{"type":149,"name":150,"callback":151,"file":146,"line":152},"action","plugins_loaded","bbmg_init",210,{"type":149,"name":154,"callback":155,"priority":156,"file":146,"line":157},"bbmg_run_scan_async","bbmg_run_scan_async_handler",10,237,{"type":149,"name":159,"callback":160,"file":161,"line":162},"rest_api_init","register_routes","includes\u002Fclass-rest-api.php",21,{"type":149,"name":164,"callback":165,"priority":166,"file":167,"line":168},"admin_menu","register_menu",20,"includes\u002Fclass-security-admin.php",42,{"type":149,"name":170,"callback":171,"priority":156,"file":167,"line":172},"admin_enqueue_scripts","enqueue_assets",43,{"type":149,"name":174,"callback":175,"file":176,"line":177},"admin_init","register_settings","includes\u002Fclass-settings.php",63,{"type":143,"name":144,"callback":179,"file":180,"line":181},"add_cron_schedules","includes\u002Fscanner\u002Fclass-scan-scheduler.php",66,{"type":149,"name":174,"callback":175,"file":183,"line":184},"includes\u002Fscanner\u002Fclass-threat-settings.php",62,[186,191,195],{"action":187,"nopriv":188,"callback":189,"hasNonce":190,"hasCapCheck":190,"file":183,"line":177},"bbmg_test_malware_apis",false,"ajax_test_apis",true,{"action":192,"nopriv":188,"callback":193,"hasNonce":190,"hasCapCheck":190,"file":183,"line":194},"bbmg_update_phishtank_db","ajax_update_phishtank",64,{"action":196,"nopriv":188,"callback":197,"hasNonce":190,"hasCapCheck":190,"file":183,"line":198},"bbmg_clear_malware_cache","ajax_clear_cache",65,[],[],[],{"dangerousFunctions":203,"sqlUsage":209,"outputEscaping":212,"fileOperations":222,"externalRequests":111,"nonceChecks":223,"capabilityChecks":223,"bundledLibraries":224},[204],{"fn":205,"file":206,"line":207,"context":208},"unserialize","includes\u002Fscanner\u002Fclass-database-scanner.php",1004,"$un = @unserialize( $value );",{"prepared":210,"raw":11,"locations":211},109,[],{"escaped":213,"rawEcho":80,"locations":214},509,[215,218,220],{"file":183,"line":216,"context":217},372,"raw output",{"file":219,"line":168,"context":217},"templates\u002Fsecurity-dashboard.php",{"file":219,"line":221,"context":217},44,4,5,[],[],{"summary":227,"deductions":228},"The \"brandbees-malware-guardian\" v1.0.0 plugin exhibits a generally positive security posture based on the provided static analysis. The absence of any known CVEs and a strong adherence to secure coding practices like prepared statements for SQL queries and comprehensive output escaping (99%) are commendable. Furthermore, the plugin demonstrates good security awareness by implementing nonce checks and capability checks on all its identified entry points, preventing potential Cross-Site Request Forgery (CSRF) and privilege escalation attacks.\n\nHowever, a single instance of the `unserialize()` function raises a significant concern. If the data passed to this function is not strictly controlled and validated from a trusted source, it could be susceptible to Object Unserialization Vulnerabilities (PHP Object Injection), allowing an attacker to potentially execute arbitrary code. While the taint analysis reported no specific flows with unsanitized paths, the mere presence of `unserialize()` without further context regarding its usage warrants caution. The plugin also makes 14 external HTTP requests, which, if not handled securely, could introduce risks like Server-Side Request Forgery (SSRF) or data leakage, although no specific indicators for these are present in the provided data.\n\nIn conclusion, the plugin is built on a solid foundation of secure coding principles, and its vulnerability history is clean, suggesting a responsible development approach. The primary area of concern lies with the `unserialize()` function, which requires careful review of its implementation to ensure data integrity and prevent potential injection attacks. The external HTTP requests also represent a potential, albeit unconfirmed, attack vector that should be monitored.",[229],{"reason":230,"points":231},"Use of unserialize() function",15,"2026-04-16T14:31:02.125Z",{"wat":234,"direct":245},{"assetPaths":235,"generatorPatterns":239,"scriptPaths":240,"versionParams":241},[236,237,238],"\u002Fwp-content\u002Fplugins\u002Fbrandbees-malware-guardian\u002Fassets\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fbrandbees-malware-guardian\u002Fassets\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fbrandbees-malware-guardian\u002Fassets\u002Fjs\u002Fvendor\u002Fchart.js",[],[237,238],[242,243,244],"brandbees-malware-guardian\u002Fassets\u002Fcss\u002Fadmin.css?ver=","brandbees-malware-guardian\u002Fassets\u002Fjs\u002Fadmin.js?ver=","brandbees-malware-guardian\u002Fassets\u002Fjs\u002Fvendor\u002Fchart.js?ver=",{"cssClasses":246,"htmlComments":256,"htmlAttributes":265,"restEndpoints":270,"jsGlobals":274,"shortcodeOutput":276},[247,248,249,250,251,252,253,254,255],"bbmg-malware-scan-results","bbmg-scan-status-indicator","bbmg-scan-summary","bbmg-threat-list-item","bbmg-threat-details","bbmg-threat-actions","bbmg-scan-control-buttons","bbmg-scan-progress-bar","bbmg-scan-log-entry",[257,258,259,260,261,262,263,264],"\u003C!-- BrandBees Malware Guardian Admin Page -->","\u003C!-- Scan Results Section -->","\u003C!-- Scan Summary Section -->","\u003C!-- Threat List Section -->","\u003C!-- Threat Details Modal -->","\u003C!-- Scan Controls Section -->","\u003C!-- Scan Progress Indicator -->","\u003C!-- Scan Log Section -->",[266,267,268,269],"data-scan-id","data-scan-status","data-threat-id","data-action-type",[271,272,273],"\u002Fwp-json\u002Fbbmg\u002Fv1\u002Fscan","\u002Fwp-json\u002Fbbmg\u002Fv1\u002Fthreats","\u002Fwp-json\u002Fbbmg\u002Fv1\u002Fsettings",[275],"bbmg_admin_params",[],{"error":190,"url":278,"statusCode":279,"statusMessage":280,"message":280},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fbrandbees-malware-guardian\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":282,"versions":283},1,[284],{"version":6,"download_url":24,"svn_tag_url":285,"released_at":26,"has_diff":188,"diff_files_changed":286,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":287,"is_current":190},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbrandbees-malware-guardian\u002Ftags\u002F1.0.0\u002F",[],[]]