Anti-Malware Security and Brute-Force Firewall Security & Risk Analysis
wordpress.org/plugins/gotmlsThis Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.
Is Anti-Malware Security and Brute-Force Firewall Safe to Use in 2026?
Mostly Safe
Score 83/100Anti-Malware Security and Brute-Force Firewall is generally safe to use. 9 past CVEs were resolved. Keep it updated.
The "gotmls" plugin v4.23.88 exhibits a concerning security posture despite some positive indicators. While it boasts a small attack surface with no unprotected entry points and a high percentage of SQL queries using prepared statements, several critical vulnerabilities in its code and taint analysis are deeply worrying. The presence of four "unserialize" calls is a significant red flag, especially when combined with a high number of unsanitized paths identified in the taint analysis. This suggests a strong possibility of deserialization vulnerabilities, where malicious data could lead to code execution. Furthermore, the plugin's historical vulnerability record, with nine known CVEs including one critical and two high-severity issues, points to a recurring pattern of security weaknesses. The types of past vulnerabilities, such as Code Injection, Deserialization of Untrusted Data, XSS, and CSRF, align with the risks suggested by the static analysis. The lack of nonce checks is another notable deficiency. Overall, while the plugin attempts to use prepared statements and has a limited attack surface, the identified risks in deserialization, unsanitized data flows, and historical vulnerabilities paint a picture of a plugin that requires immediate attention and remediation.
Key Concerns
- Critical taint flow detected
- High severity taint flow detected
- Dangerous function 'unserialize' used
- Low percentage of properly escaped output
- No nonce checks present
- Total of 9 known CVEs
- Historical critical vulnerability
- Historical high severity vulnerabilities
Anti-Malware Security and Brute-Force Firewall Security Vulnerabilities
CVEs by Year
Severity Breakdown
9 total CVEs
Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Anti-Malware Security and Brute-Force Firewall <= 4.21.96 - Unauthenticated Remote Code Execution
Anti-Malware Security and Brute-Force Firewall <= 4.21.85 - Authenticated (Admin+) PHP Object Injection
Anti-Malware Security and Brute-Force Firewall <= 4.20.95 - Reflected Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall <= 4.21.74 - Reflected Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall <= 4.20.93 - Reflected Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall <= 4.15.17 - Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall <= 4.15.22 - Cross-Site Request Forgery
Anti-Malware Security and Brute-Force Firewall <= 4.15.22 - Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall Code Analysis
Dangerous Functions Found
SQL Query Safety
Output Escaping
Data Flow Analysis
Anti-Malware Security and Brute-Force Firewall Attack Surface
Shortcodes 2
WordPress Hooks 15
Maintenance & Trust
Anti-Malware Security and Brute-Force Firewall Maintenance & Trust
Maintenance Signals
Community Trust
Anti-Malware Security and Brute-Force Firewall Alternatives
Dotsquares Custom Login URL & Security Suite
custom-login-url-login-designer
Change your WordPress login URL, design the login page, and enhance your site's security with built-in protection tools.
VMP Security – Firewall, Malware Scan, and Login Security
vmpfence-security
Your all-in-one WordPress security solution. Stop hackers with our firewall, detect malware before it spreads, and protect your site.
Wordfence Security – Firewall, Malware Scan, and Login Security
wordfence
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall
limit-login-attempts-reloaded
Block excessive login attempts and protect your site against brute force attacks. Simple, yet powerful tools to improve site performance.
Security Optimizer – The All-In-One Protection Plugin
sg-security
Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.
Anti-Malware Security and Brute-Force Firewall Developer Profile
9 plugins · 101K total installs
How We Detect Anti-Malware Security and Brute-Force Firewall
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.