[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAkO3VDVlae6y4DeYV8x7YdVGKZKBDF2S_ici5wQ-Yxc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":75,"crawl_stats":38,"alternatives":79,"analysis":176,"fingerprints":768},"quttera-web-malware-scanner","Quttera ThreatSign – Web Malware Scanner for WordPress","4.0.0.3","quttera","https:\u002F\u002Fprofiles.wordpress.org\u002Fquttera\u002F","\u003Cp>Quttera ThreatSign protects your WordPress website with multi-layered security:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Malware Detection:\u003C\u002Fstrong> Powered by Quttera’s AI-driven heuristic engine, the scanner detects malicious PHP, obfuscated JavaScript, hidden iframes, redirects, spam, SEO malware, and credit-card skimmers targeting checkout pages. The plugin performs on-demand scans directly from your WordPress admin and checks your domain against more than 40 global security authorities, including Google, McAfee, Norton, and Yandex. Detection capabilities are continuously enhanced using insights from Quttera’s worldwide threat intelligence network.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Brute Force Protection:\u003C\u002Fstrong> Prevents unauthorized login attempts with IP locking, configurable rate limiting, and environment-aware protection policies. Supports both shared hosting (aggressive locking) and dedicated servers (progressive delays). Includes emergency bypass mechanism for critical situations.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Bot Protection:\u003C\u002Fstrong> Layered defense against automated attacks using multi-stage risk evaluation, token-bucket rate limiting, and legitimate bot recognition (Googlebot, Bingbot, etc.). Protects REST API, XML-RPC, and WooCommerce endpoints with endpoint-specific risk scoring.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Admin User Monitoring:\u003C\u002Fstrong> Real-time detection and alerting for unauthorized admin additions, removals, and role changes with database audit trail and snapshots.\u003C\u002Fp>\n\u003Cp>For complete protection—including automated malware removal, scheduled scanning, WAF, and 24\u002F7 monitoring—you can upgrade to a ThreatSign Website Security plan.\u003C\u002Fp>\n\u003Ch4>Malware Detection Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>One-click on-demand scans from WP admin\u003C\u002Fli>\n\u003Cli>0-day (unknown threat) detection via heuristic & behavioral analysis\u003C\u002Fli>\n\u003Cli>Detection of malicious PHP (backdoors, shells, injections)\u003C\u002Fli>\n\u003Cli>Detection of obfuscated or polymorphic JavaScript\u003C\u002Fli>\n\u003Cli>Identification of malicious iframes, redirects & hidden links\u003C\u002Fli>\n\u003Cli>Detection of spam & SEO malware\u003C\u002Fli>\n\u003Cli>Checkout skimmer detection\u003C\u002Fli>\n\u003Cli>Inspection of WordPress core file integrity\u003C\u002Fli>\n\u003Cli>Detection of alien or unauthorized files in core directories\u003C\u002Fli>\n\u003Cli>External links and outbound reference analysis\u003C\u002Fli>\n\u003Cli>Blacklist checks across 40+ security authorities\u003C\u002Fli>\n\u003Cli>Cloud-based scanning to reduce server resource load\u003C\u002Fli>\n\u003Cli>Detailed investigation reports with severity levels\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Brute Force Protection Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>IP-based locking with configurable thresholds\u003C\u002Fli>\n\u003Cli>Multi-stage failure detection with soft and hard locks\u003C\u002Fli>\n\u003Cli>Environment-aware policies for shared hosting and dedicated servers\u003C\u002Fli>\n\u003Cli>IP whitelist\u002Fblacklist with CIDR notation support\u003C\u002Fli>\n\u003Cli>Emergency bypass mechanism via constant or filter\u003C\u002Fli>\n\u003Cli>User account lockout alerts via email\u003C\u002Fli>\n\u003Cli>Combo-lock (IP + username) detection\u003C\u002Fli>\n\u003Cli>Rate limiting with progressive delays\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Bot Protection Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Multi-stage risk evaluation with heuristic analysis\u003C\u002Fli>\n\u003Cli>Token-bucket rate limiting across multiple lanes (global, REST, XML-RPC, checkout, cart)\u003C\u002Fli>\n\u003Cli>Legitimate bot recognition (Googlebot, Bingbot with elevated rate limits)\u003C\u002Fli>\n\u003Cli>REST API enumeration and authentication protection\u003C\u002Fli>\n\u003Cli>WooCommerce endpoint protection (checkout & cart)\u003C\u002Fli>\n\u003Cli>Configurable operation modes (Observe, Balanced, Aggressive)\u003C\u002Fli>\n\u003Cli>Risk-based challenge mechanisms and exponential backoff\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Admin User Monitoring Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Real-time detection of admin user additions and removals\u003C\u002Fli>\n\u003Cli>Admin role change tracking\u003C\u002Fli>\n\u003Cli>Database snapshot comparison for audit trail\u003C\u002Fli>\n\u003Cli>WP-Cron scheduled checks (1-minute intervals)\u003C\u002Fli>\n\u003Cli>Immediate detection via WordPress hooks\u003C\u002Fli>\n\u003Cli>Email alerts for unauthorized changes\u003C\u002Fli>\n\u003Cli>Comprehensive alarm system integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you need malware removal assistance, contact us at support@quttera.com or sign up for any\u003Cbr \u002F>\nof our ThreatSign annual plans, which include cleanup & blacklist removal:\u003Cbr \u002F>\nhttps:\u002F\u002Fquttera.com\u002Fanti-malware-website-monitoring-signup\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fquttera.com\" rel=\"nofollow ugc\">Quttera\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Plugin’s other home\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fquttera.com\u002Fwordpress_malware_scanner\" rel=\"nofollow ugc\">WordPress Malware Scanner\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","WordPress multi-level security scanner detecting malware, 0-day threats, brute-force attacks, bot attacks, and unauthorized admin changes.",10000,4426011,78,47,"2026-03-12T00:02:00.000Z","6.9.4","3.3.2","7.2",[20,21,22,23,24],"card-skimmer","malware-removal","malware-scanner","threat-detection","wordpress-security","http:\u002F\u002Fquttera.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquttera-web-malware-scanner.4.0.0.3.zip",98,3,0,"2025-08-14 00:00:00","2026-03-15T15:16:48.613Z",[33,49,65],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2025-8013","quttera-web-malware-scanner-authenticated-administrator-server-side-request-forgery","Quttera Web Malware Scanner \u003C= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery","The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.",null,"\u003C=3.5.1.41","3.5.2.1","low",3.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","Server-Side Request Forgery (SSRF)","2025-08-15 06:40:42",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F40957153-45f1-40c9-91ce-f3491ca7eee5?source=api-prod",1,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":56,"cvss_score":57,"cvss_vector":58,"vuln_type":59,"published_date":60,"updated_date":61,"references":62,"days_to_patch":64},"CVE-2023-6065","quttera-web-malware-scanner-sensitive-data-exposure","Quttera Web Malware Scanner \u003C= 3.4.1.48 - Sensitive Data Exposure","The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.1.48 via easy to guess scan log file names. This makes it possible for unauthenticated attackers to extract sensitive data.","\u003C=3.4.1.48","3.4.2.1","medium",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","Exposure of Sensitive Information to an Unauthorized Actor","2023-11-21 00:00:00","2024-01-22 19:56:02",[63],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F2163af55-1ea4-4c60-b9f0-baf99297c6bc?source=api-prod",63,{"id":66,"url_slug":67,"title":68,"description":69,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":56,"cvss_score":70,"cvss_vector":71,"vuln_type":72,"published_date":60,"updated_date":61,"references":73,"days_to_patch":64},"CVE-2023-6222","quttera-web-malware-scanner-authenticated-administrator-directory-traversal-via-showfile","Quttera Web Malware Scanner \u003C= 3.4.1.48 - Authenticated (Administrator+) Directory Traversal via ShowFile","The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.4.1.48 via the ShowFile function. This allows an administrator to view arbitrary files on the server.",6.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",[74],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa9992d0d-7c6e-4184-8f48-1515d50cc028?source=api-prod",{"slug":7,"display_name":7,"profile_url":8,"plugin_count":48,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":76,"trust_score":77,"computed_at":78},42,87,"2026-04-03T18:40:47.761Z",[80,101,122,143,161],{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":90,"num_ratings":91,"last_updated":92,"tested_up_to":16,"requires_at_least":93,"requires_php":94,"tags":95,"homepage":98,"download_link":99,"security_score":100,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"malcare-security","MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall","6.36","malcare","https:\u002F\u002Fprofiles.wordpress.org\u002Fmalcare\u002F","\u003Ch3>MALCARE SECURITY SERVICES\u003C\u002Fh3>\n\u003Cp>Security Plugin For WordPress Websites\u003Cbr \u002F>\n★★★★★\u003C\u002Fp>\n\u003Cp>A WordPress security plugin ensures that your website remains completely safe and secure, always. We created \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002F\" rel=\"nofollow ugc\">MalCare Security Plugin\u003C\u002Fa> to help website owners worry less about their site security, achieve peace of mind and focus all their energies on growing their business or website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why you need MalCare Security?\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fj3h0JF0we4o?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Difference Between MalCare Free vs Premium\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F4ja5ix9WDCo?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>Why MalCare is best WordPress security plugin?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fvt-0TrMV-TQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>MalCare in 1 Minute – Overview\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FH1XRntW_FeE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Important Links: \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Ffeatures\u002F\" rel=\"nofollow ugc\">Security Features\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002F\" rel=\"nofollow ugc\">Why Choose MalCare?\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Ftop-wordpress-security-plugins-compared\u002F\" rel=\"nofollow ugc\">Comparisons\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fmalcare-free-premium\u002F\" rel=\"nofollow ugc\">Free vs Paid\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>MalCare is the \u003Cstrong>fastest\u003C\u002Fstrong> malware detection and removal plugin loved by thousands of developers and agencies. With an industry-first \u003Cstrong>automatic one-click malware removal\u003C\u002Fstrong>, your WordPress website is clean before Google blacklists it or your web host takes it down. MalCare has been developed from the ground up after \u003Cstrong>analyzing over 240,000 websites over 2.5+ years\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Its \u003Cstrong>intelligent scanning methodology\u003C\u002Fstrong> will \u003Cstrong>never slow down your WordPress site\u003C\u002Fstrong> and \u003Cstrong>accurately identifies\u003C\u002Fstrong> the most complex malware that typically goes undetected in other popular WordPress security plugins.\u003C\u002Fp>\n\u003Cp>The \u003Cstrong>one-click malware cleaner\u003C\u002Fstrong> offers unlimited automated cleanups while the inbuilt \u003Cstrong>powerful cloud-based firewall\u003C\u002Fstrong> ensures round-the-clock website protection against spam attacks. Moreover, you can \u003Cstrong>block countries\u003C\u002Fstrong> to mitigate hack attacks.\u003C\u002Fp>\n\u003Cp>MalCare comes integrated with a \u003Cstrong>complete website management\u003C\u002Fstrong> module that ensures better WP security and site management to your websites from a single dashboard.\u003C\u002Fp>\n\u003Cp>The WP security plugin \u003Cstrong>notifies you if the WordPress site goes down\u003C\u002Fstrong> so that you can handle the situation before you start losing visitors. Performance Check enables WordPress users to keep an eye on their \u003Cstrong>loading speed\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>MalCare offers a premium \u003Cstrong>White-Label\u003C\u002Fstrong> solution that lets agencies provide better website security to their clients without risking their business. And enables users to \u003Cstrong>generate beautiful reports\u003C\u002Fstrong> for their clients.\u003C\u002Fp>\n\u003Ch3>Why Choose MalCare WordPress Security Plugin?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Ch4>WordPress Malware Scanner\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Cloud Based Deep malware scanner\u003C\u002Fli>\n\u003Cli>Doesn’t Slow down your WordPress site\u003C\u002Fli>\n\u003Cli>Detects malware BEFORE it’s too late\u003C\u002Fli>\n\u003Cli>NO impact on your website\u003C\u002Fli>\n\u003Cli>Finds ALL types of malware, even new & complex ones\u003C\u002Fli>\n\u003Cli>Get Alerts about Security Risks with our WordPress Vulnerability Scanner\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>WordPress Malware Removal\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>View hacked file details\u003C\u002Fli>\n\u003Cli>Cleans your site INSTANTLY, in less than 60 Secs\u003C\u002Fli>\n\u003Cli>Removes ALL traces of malware\u003C\u002Fli>\n\u003Cli>UNLIMITED hack cleanups\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>WordPress Website Protection\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Blocks hacker BOTS from attacking login page\u003C\u002Fli>\n\u003Cli>Identifies & blocks MALICIOUS traffic\u003C\u002Fli>\n\u003Cli>Enables users to HARDEN their WordPress sites\u003C\u002Fli>\n\u003Cli>Enables users to block ENTIRE countries\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Easy to Use\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Set up an account in 60 secs\u003C\u002Fli>\n\u003Cli>Configure security once & never look at it again\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Agile & responsive customer support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Why Is MalCare Such a Game-Changer?\u003C\u002Fh3>\n\u003Cp>MalCare offers unparalleled security services. Some services are free and others are paid.\u003C\u002Fp>\n\u003Ch4>MalCare’s FREE Services –\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\n\u003Ch4>Cloud-Based Malware Scanning (Free)\u003C\u002Fh4>\n\u003Cp>MalCare’s Cloud-based Scanning ensures no impact on your website ever. Moreover, it detects Complex Malware missed by other popular security plugins for WordPress.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Web-Application WordPress Firewall (Free)\u003C\u002Fh4>\n\u003Cp>Get Real-Time Protection for your WordPress website against the latest security threats with MalCare’s Smart Firewall. Block hackers & bots before they harm your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>CAPTCHA-Based Login Page Protection (Free)\u003C\u002Fh4>\n\u003Cp>Automatically prevent brute force attacks with MalCare’s Smart Captcha-Based Login Page Protection. Round-the-clock protection against malicious traffic.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>MalCare’s PAID Services –\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\n\u003Ch4>Viewing Hacked Files (Paid)\u003C\u002Fh4>\n\u003Cp>View the infected files present on your WordPress website. Learn which themes or plugins or files or folders were infected by hackers.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Industry-First Instant Malware Removal (Paid)\u003C\u002Fh4>\n\u003Cp>Clean your hacked site instantly in less than 60 secs with MalCare’s 1-Click Cleaner. Clean your website before Google blacklists it or your web host takes it down.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>WordPress Recommended Website Hardening (Paid)\u003C\u002Fh4>\n\u003Cp>Easily configure WordPress recommended best security practices with just 1-Click from right within MalCare’s dashboard. No technical knowledge needed.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Geo-blocking (Paid)\u003C\u002Fh4>\n\u003Cp>Restrict access to users based on their geographical location. Easily block all visitors from certain countries to mitigate the risk of being hacked.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Uptime Monitoring (Paid)\u003C\u002Fh4>\n\u003Cp>With MalCare’s Uptime Monitoring keep a steady eye on your WordPress site. It ensures that you are not oblivious to website downtime.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Common Hack Attacks Prevented By MalCare\u003C\u002Fh3>\n\u003Cp>MalCare protects websites against all common hack attacks which includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-brute-force\u002F\" rel=\"nofollow ugc\">Brute force attacks\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fjapanese-keyword-hack\u002F\" rel=\"nofollow ugc\">Japanese keyword hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-hacked-redirect\u002F\" rel=\"nofollow ugc\">WordPress redirect hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwhat-is-pharma-hack-how-to-clean-it\u002F\" rel=\"nofollow ugc\">Pharma hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fseo-spam\u002F\" rel=\"nofollow ugc\">SEO spam hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-theme-hacked\u002F\" rel=\"nofollow ugc\">WordPress theme hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fspam-link-injection-wordpress\u002F\" rel=\"nofollow ugc\">WordPress spam link injections\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Frevslider-exploit\u002F\" rel=\"nofollow ugc\">Revslider hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-timthumb\u002F\" rel=\"nofollow ugc\">TimThumb hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fadminer-php-hack\u002F\" rel=\"nofollow ugc\">Adminer.php hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fcross-site-scripting-xss-attacks-what-how-prevent-them\u002F\" rel=\"nofollow ugc\">XSS or cross-site scripting hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fhow-to-detect-and-remove-wp-vcd-malware-a-step-by-step-guide-and-a-bonus-plugin\u002F\" rel=\"nofollow ugc\">WP-VCD hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fpreventing-sql-injections\u002F\" rel=\"nofollow ugc\">SQL injection hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fwordpress-malvertising\u002F\" rel=\"nofollow ugc\">WordPress malvertising hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fremove-google-blacklist-warning\u002F\" rel=\"nofollow ugc\">Google Blacklist hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fgoogle-adwords-account-suspended\u002F\" rel=\"nofollow ugc\">Google Adwords hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fsession-hijacking-cookie-stealing\u002F\" rel=\"nofollow ugc\">Cookie stealing & session hijacking\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fhow-to-remove-phishing\u002F\" rel=\"nofollow ugc\">WordPress phishing hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Ffavicon-ico-virus-wordpress\u002F\" rel=\"nofollow ugc\">Favicon.ico virus hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fremoving-wp-feed-php-malware\u002F\" rel=\"nofollow ugc\">WP-Feed.php & WP-Tmp.php\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fhow-to-scan-malware-and-backdoors-of-your-wordpress-site\u002F\" rel=\"nofollow ugc\">Backdoor hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fcoinhive-malware-wordpress\u002F\" rel=\"nofollow ugc\">Coinhive hack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Fblog\u002Fdeface-wordpress\u002F\" rel=\"nofollow ugc\">WordPress deface hack\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>MalCare Free vs. MalCare Premium\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Ch4>Cloud Based Malware Scanner (FREE)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Cloud-Based Malware Scanning \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Deep Malware Scanning – Files & Database \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Website Firewall (FREE)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Web Application Firewall \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Plugin Based Firewall \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Rules update every 7 days \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Login Page Protection \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Bot Protection \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Rules update every 5 mins \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Geo-Blocking \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Website Hardening \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Instant Malware Removal (PAID)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>View Malware Insights \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Instant One-Click Clean Ups \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Automatic Clean-Ups \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Unlimited Clean-Ups \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Personalized Customer Support (Paid)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Support on WordPress forum \u003Cstrong>(Free)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Support via email and chat \u003Cstrong>(Paid)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Who Can Benefit From MalCare?\u003C\u002Fh3>\n\u003Cp>MalCare is perfect for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Any WordPress Websites\u003C\u002Fli>\n\u003Cli>Small Business Websites\u003C\u002Fli>\n\u003Cli>Developer Websites\u003C\u002Fli>\n\u003Cli>Web Designing Websites\u003C\u002Fli>\n\u003Cli>eCommerce Stores\u003C\u002Fli>\n\u003Cli>Niche Sites\u003C\u002Fli>\n\u003Cli>Artists & Photographers Sites\u003C\u002Fli>\n\u003Cli>Amateur & Professional Bloggers\u003C\u002Fli>\n\u003Cli>Local Business Sites\u003C\u002Fli>\n\u003Cli>Website for Startups\u003C\u002Fli>\n\u003Cli>Websites Selling Courses\u003C\u002Fli>\n\u003Cli>Influencer Sites\u003C\u002Fli>\n\u003Cli>Web Hosting Companies\u003C\u002Fli>\n\u003Cli>Website Maintenance Services or Agencies\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Detailed Setup Step-by-Step Tutorials\u003C\u002Fh3>\n\u003Cp>This WordPress security plugin works in tandem with the \u003Ca href=\"https:\u002F\u002Fwww.malcare.com\" rel=\"nofollow ugc\">MalCare\u003C\u002Fa> servers. MalCare servers do all the heavy processing and will alert you if your site has any security issues.\u003C\u002Fp>\n\u003Cp>Hence a MalCare account is needed to use the plugin. This account can also be used by our other products including \u003Ca href=\"https:\u002F\u002Fblogvault.net\" rel=\"nofollow ugc\">BlogVault\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmalcare.freshdesk.com\u002Fsupport\u002Fsolutions\u002Farticles\u002F35000055512-how-do-i-set-up-a-malcare-account-\" rel=\"nofollow ugc\">How to Set Up a MalCare Account?\u003C\u002Fa> (Help Doc)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=v8L_DZllk7k&list=\" rel=\"nofollow ugc\">How to Set Up a MalCare Account?\u003C\u002Fa> (Video)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>MalCare Full Security Features List\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Ch4>Cloud Based Malware Scanner\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Daily Scan Frequency\u003C\u002Fli>\n\u003Cli>On-demand Site Scans\u003C\u002Fli>\n\u003Cli>Scan Non-WP Files\u003C\u002Fli>\n\u003Cli>Does not slow down your website ever\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Instant Malware Removal\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>View Hacked Files details\u003C\u002Fli>\n\u003Cli>Instant Automatic Malware Removal\u003C\u002Fli>\n\u003Cli>Removal of Unknown & New Malware\u003C\u002Fli>\n\u003Cli>Unlimited Malware Removal\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Intelligent Malware Protection\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Web Application Firewall\u003C\u002Fli>\n\u003Cli>IP Whitelisting\u003C\u002Fli>\n\u003Cli>CAPTCHA-based Login Page Protection\u003C\u002Fli>\n\u003Cli>Traffic Logs\u003C\u002Fli>\n\u003Cli>Login Logs\u003C\u002Fli>\n\u003Cli>Geo-Blocking\u003C\u002Fli>\n\u003Cli>Alerts for Suspicious Logins\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Website Hardening\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Block PHP Execution in Untrusted Folders\u003C\u002Fli>\n\u003Cli>Disable Files Editor\u003C\u002Fli>\n\u003Cli>Block Plugin or Theme Installation\u003C\u002Fli>\n\u003Cli>Change Security Keys\u003C\u002Fli>\n\u003Cli>Reset All Passwords\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Complete Website Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Centralized Dashboard\u003C\u002Fli>\n\u003Cli>Plugins & Themes Management & Update\u003C\u002Fli>\n\u003Cli>User Management\u003C\u002Fli>\n\u003Cli>Team Management\u003C\u002Fli>\n\u003Cli>Client Management\u003C\u002Fli>\n\u003Cli>Generate & Schedule Reports\u003C\u002Fli>\n\u003Cli>White-Labeling Solution\u003C\u002Fli>\n\u003Cli>Uptime Monitoring\u003C\u002Fli>\n\u003Cli>Site Speed Monitoring\u003C\u002Fli>\n\u003Cli>Blacklist Alarm\u003C\u002Fli>\n\u003Cli>Slack Integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Email\u003C\u002Fli>\n\u003Cli>Chat\u003C\u002Fli>\n\u003Cli>Social Media\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Fans Are Raving About Us\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fvisualcomposer.com\u002Fblog\u002Fmalcare-review\u002F\" rel=\"nofollow ugc\">MalCare Review on VisualComposer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.elegantthemes.com\u002Fblog\u002Fresources\u002Fmalcare-security-and-firewall-the-right-security-plugin-for-your-site\" rel=\"nofollow ugc\">MalCare Review on ElegantThemes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fblog.weglot.com\u002Fideal-security-solution-malcare-review\u002F\" rel=\"nofollow ugc\">MalCare Review on Weglot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wpwhitesecurity.com\u002Fmalcare-wordpress-site-security-service-reviewed\u002F\" rel=\"nofollow ugc\">MalCare Review on WPWhiteSecurity\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=2yNIb4Pc_ig\" rel=\"nofollow ugc\">MalCare Reviews by WordPress Influencer Adam Preiser (Plus Real Malware Removal Demo)\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Connect With Our Team of Security Experts\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002FWordPressForWebCreators\u002F\" rel=\"nofollow ugc\">Join MalCare’s Facebook Community\u003C\u002Fa> – The purpose of the group is to enable Web Creators to gain valuable insights and help from community members which will be valuable to their business. So, if you are a WordPress user & want to keep up with the latest industry news and get help for your business, \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002FWordPressForWebCreators\u002F\" rel=\"nofollow ugc\">join us\u003C\u002Fa>!\u003C\u002Fp>\n\u003Ch3>Don’t Know Where to Getting Started? Start From Here –\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmalcare.freshdesk.com\u002Fsupport\u002Fsolutions\u002Farticles\u002F35000055512-how-do-i-set-up-a-malcare-account-\" rel=\"nofollow ugc\">How to Setup MalCare Account?\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002FWordPressForWebCreators\u002F\" rel=\"nofollow ugc\">Join MalCare Facebook Group MalCare\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fchannel\u002FUC5oQAXXvndQJuyVrWgMRWqg\" rel=\"nofollow ugc\">MalCare Tutorial Videos\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmalcare.freshdesk.com\u002Fsupport\u002Fhome\" rel=\"nofollow ugc\">User Help Documentations\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.malcare.com\u002Ffaq\u002F\" rel=\"nofollow ugc\">Frequently Asked Questions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmalcare.freshdesk.com\u002Fsupport\u002Ftickets\u002Fnew\" rel=\"nofollow ugc\">Support for MalCare Users\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>MalCare vs. Others\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.codeinwp.com\u002Fblog\u002Fsucuri-vs-wordfence-vs-malcare\u002F\" rel=\"nofollow ugc\">MalCare vs Sucuri vs Wordfence by CodeinWP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpmayor.com\u002Fmalcare-sucuri-wordfence-sitelock-ithemes-security-comparison\u002F\" rel=\"nofollow ugc\">MalCare vs Sucuri vs Wordfence vs SiteLock vs iThemes Security by WPMayor\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.",200000,17387894,86,519,"2026-01-29T13:26:00.000Z","4.0","7.0",[96,21,22,97,24],"firewall","vulnerabilities","https:\u002F\u002Fwww.malcare.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmalcare-security.6.36.zip",100,{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":109,"downloaded":110,"rating":111,"num_ratings":112,"last_updated":113,"tested_up_to":16,"requires_at_least":114,"requires_php":115,"tags":116,"homepage":120,"download_link":121,"security_score":100,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"cwis-antivirus-malware-detected","WebDefender Security – Protection & AntiSpam","5.0.2.1","CobWeb Security Ltd.","https:\u002F\u002Fprofiles.wordpress.org\u002Fcwis\u002F","\u003Ch4>A Professional Security Protection Plugin for WP\u003C\u002Fh4>\n\u003Cp>The WebDefender was developed by a team of security experts and it incorporates professional security tools for the best all around WordPress website protection and prevention of threats. Includes GDPR compline module.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Smart Protection \u002F Website Hide Function (Prevent Hacker Attack \u002F Security) \u002F Anti-Spam Protection \u002F Brute Force Bot Attack Prevention \u002F Smart Firewall\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detection \u002F Antivirus Scanner \u002F Database Malware \u002F Adware, Spyware, Spam Links\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Diagnostic \u002F Vulnerabilities Detection \u002F Blacklist Monitoring\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Built-in Malware Removal Tool \u002F Security Cleaning Tool\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security Hardening \u002F Hosting Hardening Check \u002F Automatic Updating Function\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GDPR Tools \u002F GDPR Compliance Function\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All of these solution make the WebDefender one of the best all around security protection tools for your WordPress resource.\u003C\u002Fp>\n\u003Ch3>The WebDefender offers the following tools and protection measures\u003C\u002Fh3>\n\u003Ch4>Primary Protection Function\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Website Hide function\u003C\u002Fstrong> that hides your WP site from crawlers spiders and bots.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hides website from bots, hides the core WP website components, plugins and themes.\u003C\u002Fli>\n\u003Cli>Fully automatic encryption of your website components.\u003C\u002Fli>\n\u003Cli>Coding website without use of the .htaccess file.\u003C\u002Fli>\n\u003Cli>One click installation.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Security Protection Functions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Smart Firewall\u003C\u002Fstrong> that detects and blocks bot traffic. This is a perfect and powerful prevention tool.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anti-Bot Protection\u003C\u002Fstrong> – Monitors web traffic, filters out, and blocks bad bot traffic to a website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anti-SPAM Protection\u003C\u002Fstrong> – Automatic detection of all comments insert by bots and their filtration.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Brute Force Bot Attack Prevention\u003C\u002Fstrong> – Bots detection system to prevent attempts to crack a password (login security).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Antivirus Security Scanner\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>A professional \u003Cstrong>Antivirus Scanner\u003C\u002Fstrong> that will scan your website from external threats. Designed to detect adware and malware, backdoors, exploits, phishing code, trojans and viruses, include built-in \u003Cstrong>malware removal tool\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database Malware Scanning\u003C\u002Fstrong> – A unique ability of our algorithm is scanning the website’s database. This function crucial as more and more hackers use SQL injection to infect the websites with malware.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Adware, Spyware and SPAM links detection\u003C\u002Fstrong> – Protect you website from attached code attacks.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Vulnerabilities Detection\u003C\u002Fstrong> – Plugins and themes security vulnerabilities, SQL, XSS injections, vulnerable and insecure scripts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Blacklist Monitoring\u003C\u002Fstrong> – Check your website reputation.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Security Hardening\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Updater\u003C\u002Fstrong> – an automatic functional tool for updating your WordPress Core versions, plugins and themes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hardening\u003C\u002Fstrong> – Detect the hosting configuration security parameter.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Malware Removal Tool\u003C\u002Fh4>\n\u003Cp>Built-in file viewer and editor is an easy to use security cleaning tool for the removal of infected codes or its part depending on the type of infection.\u003C\u002Fp>\n\u003Ch4>GDPR Compliance Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>GDPR Consent management\u003C\u002Fli>\n\u003Cli>Cookies and data collection privacy management\u003C\u002Fli>\n\u003Cli>User data management\u003C\u002Fli>\n\u003Cli>Privacy information should we provide to user\u003C\u002Fli>\n\u003Cli>Personal data breaches\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Companies that collect data on citizens in European Union (EU) countries will need to comply with strict new rules around protecting customer data by May 25, 2018. The General Data Protection Regulation (GDPR) is expected to set a new standard for consumer rights regarding their data, but companies will be challenged as they put systems and processes in place to comply.\u003C\u002Fp>\n\u003Cp>Compliance will cause some concerns and new expectations of security teams. For example, the GDPR takes a wide view of what constitutes personal identification information. Companies will need the same level of protection for things like an individual’s IP address or cookie data as they do for name, address and Social Security number.\u003C\u002Fp>\n\u003Cp>This plugin is meant to assist a Controller, Data Processor, and Data Protection Officer (DPO) with efforts to meet the obligations and rights enacted under the GDPR.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NOTE:\u003C\u002Fstrong> Installing this plugin does not guarantee a full compliment with the GDPR. Please contact a GDPR consultant or a law firm to assess the necessary measures.\u003C\u002Fp>\n\u003Ch3>Technical Description\u003C\u002Fh3>\n\u003Ch4>Hide Function – Perfect Security and Protection solution\u003C\u002Fh4>\n\u003Cp>A passive security mechanism for hack protection against crawlers spiders and bots. A fullprof function – one click and your website will become hidden from bots.\u003C\u002Fp>\n\u003Cp>The Hider algorithm encrypts all layers of a website, thus hiding it from hackers by making existing vulnerabilities and other security risks invisible when searched and does not require manual configuration. Our encoding algorithm does not use the .htaccess file therefore there is no disruption to the operation of your website. This function will make your WordPress website totally invisible! A crucial step in improving your website security.\u003C\u002Fp>\n\u003Ch4>Smart Protection\u003C\u002Fh4>\n\u003Cp>A web application firewall filters, monitors, and blocks bad bot traffic to a website. It is deployed in “front” of a website and analyzes traffic – detecting and blocking anything malicious.\u003C\u002Fp>\n\u003Ch4>Anti SPAM\u003C\u002Fh4>\n\u003Cp>WebDefender includes a unique automatic algorithm for diagnosing the text entered on your website (forum, forms, comments and etc,) where made by a human or a bot. Bots won’t be allowed to enter text on your website. This is a unique algorithm, providing a unique solution to our clients.\u003Cbr \u002F>\nThe crisis is a time when almost every site is faced with a flurry of unwanted emails from reverse forms, posts and comments. Robots literally attack corporate e-mails, because of which sometimes valuable applications can be missed. But putting a captcha on the site you risk losing customer loyalty, as poorly readable images annoy 90% of users. Therefore, we offer a solution developed by WEbdefender specialists to protect the site from spam robots .\u003C\u002Fp>\n\u003Ch4>Brute Force Attack Protection\u003C\u002Fh4>\n\u003Cp>Hackers frequently use automatic bot systems to Brute force a website. Our algorithm detects those bots and prevents attempts of a password crack.\u003C\u002Fp>\n\u003Ch4>The “WebDefender” Antivirus Scanner\u003C\u002Fh4>\n\u003Cp>The builtin professional and multi-functional antivirus scanner offers top of the line security features and advanced functions for viruses and vulnerabilities detection. The scanner incorporates a user friendly malware removal tool. The diagnostic is performed by using a known database of virus signatures as well as Cobweb-Security’s Heuristic algorithm that can detected previously unknown virus signatures and zero-day vulnerabilities thus providing enterprise-level security capabilities.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WebDefender Antivirus Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Virus and malware antivirus scanner\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database security scanning (exclusive function)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>ZIP file scanning (exclusive function)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Adware, Spyware and SPAM links detection\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Powerful and easy to use malware removal tool\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security hardening analytics and recommendations\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time malware signature updates (Professional or Premium)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scanner scheduler’s settings (Professional or Premium)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Database Malware Scanning\u003C\u002Fh4>\n\u003Cp>An unique ability of our algorithm is scanning the website’s database. This function crucial as more and more hackers use SQL injection to infect the websites with malware.\u003C\u002Fp>\n\u003Ch4>Adware, Spyware and SPAM links detection\u003C\u002Fh4>\n\u003Cp>The WebDefender Scanner successfully detects:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>SEO & SPAM links\u003C\u002Fli>\n\u003Cli>Doorway pages (SEO)\u003C\u002Fli>\n\u003Cli>iFrame injections\u003C\u002Fli>\n\u003Cli>Black-hat SEO infections\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Vulnerabilities Detection\u003C\u002Fh4>\n\u003Cp>One of the most important parts of your website security and protection is a well-timed analysis for plugin, CMS and database vulnerabilities. These security vulnerabilities are an easy way for a hacker to crawl into your website. That’s why a well-timed diagnosis and update are vital for hardening the protection of the website.\u003C\u002Fp>\n\u003Cp>Our security scanner is able to find:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Plugins and themes vulnerabilities\u003C\u002Fli>\n\u003Cli>SQL, XSS malicious injections\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Blacklist Monitoring\u003C\u002Fh4>\n\u003Cp>The WebDefenders’ Blacklist Monitoring scanner checks IP addresses and website domains in the 10  most popular security blacklists and safe browsing databases.\u003C\u002Fp>\n\u003Cp>Real-time Blacklists or Blackhole lists – also called DNS-based Blackhole Lists – are lists of IP addresses published through DNS. Often there are listed computers or networks that may spam or consist malware in such lists. Many secure corporate mail servers are configured to reject or flag messages which have been sent from IP addresses listed in one of these security blacklists.\u003C\u002Fp>\n\u003Cp>Leading email systems like Gmail, Yahoo and Hotmail also use security blacklists to filter emails by addresses. If your network’s IP addresses end up in a blacklist, you and your customers can experience problems sending and receiving emails. It can significantly damage your business.\u003C\u002Fp>\n\u003Cp>WebDefender Blacklist Monitoring scanner will automatically alert you if your website addresses or domains become listed in any of the widely used URL blacklists.\u003C\u002Fp>\n\u003Ch4>The Updater – WP Core, plugin and theme automatic update\u003C\u002Fh4>\n\u003Cp>The importance of using the latest updated version of the WP core, plugins and themes is understandable to everyone and not only for the increase in functionality but in no small degree for the security of the website.\u003C\u002Fp>\n\u003Cp>To make it easier to keep track of update releases for WordPress Core, plugins and themes and installing them automatically, CobWeb-Security has introduced the Security Updater to the functionality of the WebDefender plugin.\u003C\u002Fp>\n\u003Cp>The Updater will enable you to keep track of:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress Core Updates\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress Plugin Updates\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress Theme Updates\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The Updater has three separate blocks for managing themes, plugins, and WordPress core settings.\u003C\u002Fp>\n\u003Cp>You can choose to update only individual plugins or themes or you can choose to update all of the installed themes and plugins. The Updater will also mark with different colors the importance of an update ( red to green)\u003C\u002Fp>\n\u003Ch4>Security Hardening\u003C\u002Fh4>\n\u003Cp>This function detects the hosting configuration security parameters.\u003C\u002Fp>\n\u003Ch4>Malware Removal Tool, Powerful & Easy To Use\u003C\u002Fh4>\n\u003Cp>The WebDefender Security Scanner will not only help you find all of the viruses and malicious code on your website but we will also help you remove the malware easily. Our built-in file viewer and editor is an easy to use security cleaning tool for the removal of infected codes or its part depending on the type of infection. The cleaning process is fairly simple, but it requires some knowledge in coding.\u003C\u002Fp>\n\u003Ch4>Preparing you website for the General Data Protection Regulation (GDPR)\u003C\u002Fh4>\n\u003Cp>This extension for our security plugin helps the website owner or company Data Protection Officer (DPO), Controller, Data Processor employees to fit the web application with the obligations and rights enacted under the GDPR requirement.\u003C\u002Fp>\n\u003Ch4>Professional Upgrade\u003C\u002Fh4>\n\u003Cp>Enhance the security of your website with our Professional upgrade. The Professional package will provide our clients with these additional features:\u003C\u002Fp>\n\u003Col>\n\u003Cli>FireWall:\n\u003Cul>\n\u003Cli>Real-time firewall rules updates\u003C\u002Fli>\n\u003Cli>Real-time IP Blacklists\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Hide Function:\n\u003Cul>\n\u003Cli>New mask codes for updating the Hide function online\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Scanner:\n\u003Cul>\n\u003Cli>Real-time malware signature updates\u003C\u002Fli>\n\u003Cli>Scanner scheduler settings (Professional or Premium)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Premium Program\u003C\u002Fh4>\n\u003Cp>We also offer a Professional WebDefender key that will give you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Scanner scheduler’s settings\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Upgrade to Premium support\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database malware scan (WebDefender exclusive function)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scanner report export function\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>A 100% protection – your website’s security in our hands. Our team will monitor your website online 24\u002F7, in case of a hacker attack or malware injection, we will clean and repair you website.\u003C\u002Fp>\n\u003Cp>You can \u003Ca href=\"http:\u002F\u002Fcobweb-security.com\u002Four-product\u002F\" title=\"Fix and protect your site\" rel=\"nofollow ugc\">click here to sign-up\u003C\u002Fa> for WebDefender Professional or Premium now.\u003C\u002Fp>\n\u003Ch4>Cookies set by the Plugin and WordPress\u003C\u002Fh4>\n\u003Cp>This plugin keeps track of user consent by saving them to the database. We can only do that for logged in users. For visitors, however, we track their concent by creating a cookie and storing their preferences there. The same logic applies for cookies. We set a cookie named \u003Cstrong>gdpr\u003C\u002Fstrong> that stores that information.\u003C\u002Fp>\n\u003Cp>WordPress also stores cookies on log in or commenting on a post. You can learn more about \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FWordPress_Cookies\" rel=\"nofollow ugc\">WordPress cookies here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to several external services provided by Cobweb Security in order to deliver antivirus and malware scanning functionality.\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>CWIS Version Check Service\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fupdate.cobweb-security.com\u002Freleases\u002Fversion.json\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose:\u003C\u002Fstrong> Used to check the latest plugin version and update information.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> Only the plugin version installed is sent.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Service & Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.cobweb-security.com\u002Fprivacy\" rel=\"nofollow ugc\">Cobweb Security Terms & Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>CWIS Licensing API\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fclients.cobweb-security.com\u002Fmodules\u002Fservers\u002Fcwislicensing\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose:\u003C\u002Fstrong> Validates the plugin license and ensures legitimate usage.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> Plugin license key and site domain.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Service & Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.cobweb-security.com\u002Fprivacy\" rel=\"nofollow ugc\">Cobweb Security Terms & Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>CWIS Host Check Service\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fcheck.cobweb-security.com\u002F\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose:\u003C\u002Fstrong> Performs security checks and retrieves signature updates.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> Site domain and plugin environment info.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Service & Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.cobweb-security.com\u002Fprivacy\" rel=\"nofollow ugc\">Cobweb Security Terms & Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>CWIS Signature Updates\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fupdate.cobweb-security.com\u002Freleases\u002Fcwis-signatures.json\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose:\u003C\u002Fstrong> Retrieves malware signature updates for scanning.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> No personal data is sent; only plugin requests for the latest signatures.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Service & Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.cobweb-security.com\u002Fprivacy\" rel=\"nofollow ugc\">Cobweb Security Terms & Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>These services are necessary for the proper operation of the plugin. No sensitive user data is sent without consent, and all external connections are limited to the above services.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fdownload\u002F\" title=\"Download WordPress\" rel=\"ugc\">WordPress\u003C\u002Fa> version \u003Cstrong>2.8\u003C\u002Fstrong> or higher\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsecure.php.net\u002F\" title=\"PHP scripting language\" rel=\"nofollow ugc\">PHP\u003C\u002Fa> version \u003Cstrong>4.1.0\u003C\u002Fstrong> or higher\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Final Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>We’re greatly appreciate for any references in the social networks, forums or blogs to our security scanner \u003Ca href=\"https:\u002F\u002Fcobweb-security.com\u002Fpages\u002Ffree-website-antivirus\u002F\" title=\"CobWeb Security Ltd.\" rel=\"nofollow ugc\">https:\u002F\u002Fcobweb-security.com\u002Fpages\u002Ffree-website-antivirus\u002F\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>If you have any suggestions, ideas, or comments, or if you found a bug, write us \u003Ca href=\"mailto:cwis@cobweb-security.com\" title=\"Email us\" rel=\"nofollow ugc\">cwis@cobweb-security.com\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","PRO Security – Antivirus Scanner, 2-Layer Protection Hide Security, Brute Force Security  & Antispam, Security Website and Security Hardening.",1000,273166,80,18,"2026-01-20T06:00:00.000Z","2.8","",[22,117,118,119,24],"protection","security","security-plugin","https:\u002F\u002Fcobweb-security.com\u002Fpages\u002Ffree-website-antivirus\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcwis-antivirus-malware-detected.zip",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":29,"num_ratings":29,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":115,"tags":135,"homepage":140,"download_link":141,"security_score":142,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"bravo-security","Bravo WP security Plugin","1.1","Technoyer","https:\u002F\u002Fprofiles.wordpress.org\u002Ftechnoyer\u002F","\u003Cp>Bravo WP Security Plugin, Is a plugin helps you to hide wordpress side by side Bravo wordpress firewall, wordpress antivirus (wordpress malware scanner),wordpress brute force protection, WP config security, wordpress google reCAPTCHA, error logs and more features. You can find more by visiting the next link\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fbravo.technoyer.com\" rel=\"nofollow ugc\">http:\u002F\u002Fbravo.technoyer.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>+35 WordPress Security Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Hide WordPress\u003C\u002Fstrong>: Hide version from all scripts and styles call inside the pages source.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hide wp-login.php\u003C\u002Fstrong>: Create new login link and a 404 error will appear to the default login link.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hide wp-admin\u003C\u002Fstrong>: Only the login link can redirect you to the wp-admin dashboard.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Prevent Proxy\u003C\u002Fstrong>: wp-admin Dashboard will allow real connections only.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Allow Custom Connections\u003C\u002Fstrong>: wp-admin Dashboard will allow some whitelist countries or\u002Fand IPs only.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Firewall\u003C\u002Fstrong>: ‘Firewall profiles’ is advanced option, You are able to choose High, Medium or Low Level of security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>2-Step Verification\u003C\u002Fstrong>:  You are able to choose from many options when you decide to enable 2-Step Verification. Available options: Two factor authentication, Facebook Verification, Four numbers pin code and Security question.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>reCAPTCHA\u003C\u002Fstrong>: reCAPTCHA is important to save your host resources and your WordPress safe from spam, You can add it to guest comments, login, register or\u002Fand reset password forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Housekeeping\u003C\u002Fstrong>: Clean your WordPress, Just delete unused files, comments, revisions, trashes, transient feed or\u002Fand relationships.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database Backups\u003C\u002Fstrong>: Manually or Scheduling Database backups, both options are available.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Professional Antivirus\u003C\u002Fstrong>: Malware scanner, PHPMussel scanner, File Change Detection, Google Safe Browsing Checker, DB scanner and Spam Lisiting checker.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto Scan Attachments\u003C\u002Fstrong>: Attachments will be scanned while it is being uploading.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scan New Plugins & Themes\u003C\u002Fstrong>: After you activate your new plugin or theme, Bravo will create a new antivirus process to scan the new files.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Brute Force Protection\u003C\u002Fstrong>: The complete security for your and users’ passwords by activating Bravo brute force protection options.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Blacklist Usernames\u003C\u002Fstrong>: Prevent some usernames from register or log in.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Blacklist email provider\u003C\u002Fstrong>: Prevent some email hosting from register like e.g: mail.ru.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Min & Max Usernames Length\u003C\u002Fstrong>: Minimum and Maximum chars for registered usernames.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Moderate New Members\u003C\u002Fstrong>: New members will be need admin approval before they can use their dashboard.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Accounts Protection\u003C\u002Fstrong>: You are able to define the login method (email only or username only or both as default), No weak passwords, Maximum Login Attempts and Whitelist IPs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Who is Online (Live Tracker)\u003C\u002Fstrong>: Watch your online visitors and what are they doing?!, You will be able to see all their browsing details and block\u002Funblock Ips.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Inline Visitors Blocking\u003C\u002Fstrong>: Watch your visitors activity using the traffic tracker module and you can block and IP or country when you see unusual activity.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cronjobs (Events Schedules)\u003C\u002Fstrong>: You have full control to set what is the appropriate time to run your events.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>DB Prefix Wizard\u003C\u002Fstrong>: A wizard was designed to change WP database prefix.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Development & Maintenance Mode\u003C\u002Fstrong>: There two modes in order to close your site, Development mode will allow some roles to view site as usual as they know it, but Maintenance mode will close site for all.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Bandwidth Saver\u003C\u002Fstrong>: Bravo lets you prevent ‘Hotlinking & iFrames’, Your hosted images will not show at other websites, and your website will be not shown in iframe.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Plugin Self Protection\u003C\u002Fstrong>: You can set password and choose some management roles to give them ability to manage Bravo.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Idle Logout\u003C\u002Fstrong>: The plugin will clear the current sessions for logged in users if they hold their accounts without using after (n) seconds, you will choose the duration before forcing them to log in again.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mail Watching\u003C\u002Fstrong>: This tool designed for watching outbound email messages in WordPress. It can help if someone using backdoor in your blog to send spam emails.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Error Pages\u003C\u002Fstrong>: Continuing our efforts to hide WordPress, We designed this tool to use our 404 templates instead of your theme 404 pages.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Log Watching\u003C\u002Fstrong>: If you set the firewall to ‘High’ and disable WordPress debug, You can watch the error log using or tool.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Pro Version\u003C\u002Fh3>\n\u003Cp>To unlock the Pro features please get the premium version \u003Ca href=\"http:\u002F\u002Fbravo.technoyer.com\u002Fpro.php\" rel=\"nofollow ugc\">click here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Full documentation is available \u003Ca href=\"http:\u002F\u002Fbravo.technoyer.com\u002Fwiki\u002Findex\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n","Bravo WP Security Plugin, Is a plugin helps you to hide wordpress side by side Bravo wordpress firewall, wordpress antivirus (wordpress malware scanne …",10,1898,"2017-12-11T06:22:00.000Z","4.9.29","4.7",[136,137,24,138,139],"best-wordpress-security-plugin","wordpress-malware-removal","wordpress-vulnerability-scanner","wp-security","http:\u002F\u002Fbravo-security.technoyer.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbravo-security.1.1.zip",85,{"slug":144,"name":145,"version":146,"author":147,"author_profile":148,"description":149,"short_description":150,"active_installs":29,"downloaded":151,"rating":29,"num_ratings":29,"last_updated":115,"tested_up_to":16,"requires_at_least":152,"requires_php":153,"tags":154,"homepage":158,"download_link":159,"security_score":100,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":160},"content-guard-pro","Content Guard Pro – Database Malware Scanner & Spam Detector","1.0.6","contentguardpro","https:\u002F\u002Fprofiles.wordpress.org\u002Fcontentguardpro\u002F","\u003Cp>Your file scanner says “all clear” — but Google just flagged your site for spam.\u003C\u002Fp>\n\u003Cp>Attackers don’t always hide in files. They inject spam links directly into your Gutenberg blocks, bury SEO poison in postmeta, and hide obfuscated scripts in custom fields. \u003Cstrong>Traditional security plugins don’t scan there. Content Guard Pro does.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Content Guard Pro is a database-first malware scanner that finds hidden threats in your WordPress content — the blind spot in your current security stack.\u003C\u002Fp>\n\u003Ch4>The Gap in Your WordPress Security\u003C\u002Fh4>\n\u003Cp>Most security plugins scan files. That’s essential — but it’s only half the picture.\u003C\u002Fp>\n\u003Cp>Malware and spam increasingly bypass file scanners by injecting directly into your database:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Post content\u003C\u002Fstrong> — Hidden pharma links and casino spam inside nested Gutenberg blocks\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom fields (postmeta)\u003C\u002Fstrong> — SEO spam and malicious redirects buried in metadata\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Widget areas\u003C\u002Fstrong> — Injected scripts that survive every file scan\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Options table\u003C\u002Fstrong> — Persistent backdoors and cloaked content\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’ve ever cleaned a hacked site only to have Google flag it again weeks later, database-resident threats are likely the reason. Content Guard Pro finds them.\u003C\u002Fp>\n\u003Ch4>How Content Guard Pro Protects Your Site\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Find what other security plugins miss.\u003C\u002Fstrong> Content Guard Pro scans your posts, pages, custom post types, and metadata — the places where WordPress actually stores your content.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Know exactly what to fix first.\u003C\u002Fstrong> Every finding gets a confidence score from 0 to 100 and a severity level (Critical, Suspicious, or Review). No guesswork, no alert fatigue.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Scan without slowing down your site.\u003C\u002Fstrong> Background batch processing with auto-throttling means scans run smoothly even on shared hosting. Your visitors never notice.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Keep false positives low.\u003C\u002Fstrong> Accessibility-aware detection respects screen reader classes. Configurable allowlists let you whitelist trusted domains and patterns.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Maintain a complete audit trail.\u003C\u002Fstrong> Every scan, every finding, every action — tracked and timestamped for forensics and compliance.\u003C\u002Fp>\n\u003Ch4>What the Malware Scanner Detects\u003C\u002Fh4>\n\u003Cp>Content Guard Pro catches a wide range of database-resident threats:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Hidden spam links\u003C\u002Fstrong> — Cloaked content using \u003Ccode>display:none\u003C\u002Fcode>, \u003Ccode>visibility:hidden\u003C\u002Fcode>, \u003Ccode>opacity:0\u003C\u002Fcode>, \u003Ccode>font-size:0\u003C\u002Fcode>, and other CSS tricks\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Suspicious external resources\u003C\u002Fstrong> — Unknown \u003Ccode>\u003Ciframe>\u003C\u002Fcode> and \u003Ccode>\u003Cscript>\u003C\u002Fcode> tags loading remote content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO spam injections\u003C\u002Fstrong> — Pharma, casino, crypto, and gambling keyword stuffing\u003C\u002Fli>\n\u003Cli>\u003Cstrong>URL shorteners and redirectors\u003C\u002Fstrong> — bit.ly, t.co, cutt.ly, and other redirect services hiding malicious destinations\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Obfuscated JavaScript\u003C\u002Fstrong> — \u003Ccode>eval()\u003C\u002Fcode>, \u003Ccode>fromCharCode()\u003C\u002Fcode>, Base64-encoded scripts, and \u003Ccode>data:\u003C\u002Fcode> URIs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Serialized PHP malware\u003C\u002Fstrong> — Threats hidden inside PHP arrays in postmeta, options, and page builder data\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cryptocurrency miners\u003C\u002Fstrong> — Coinhive, CryptoLoot, JSEcoin, and similar scripts\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-layer encoded attacks\u003C\u002Fstrong> — Automatically peels back up to 3 layers of obfuscation: Base64 \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> URL encoding \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> ROT13 \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> hex \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> octal\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Works Alongside Your Existing Security Plugins\u003C\u002Fh4>\n\u003Cp>Content Guard Pro is designed to \u003Cstrong>complement\u003C\u002Fstrong> file-based security, not replace it.\u003C\u002Fp>\n\u003Cp>Already using Wordfence, Sucuri, iThemes Security, All-In-One Security, or MalCare? Great — those tools protect your files. Content Guard Pro covers the database layer they don’t scan. Together, you get complete WordPress security coverage.\u003C\u002Fp>\n\u003Ch4>Built for WordPress Professionals\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Agencies managing client sites\u003C\u002Fstrong> — Find database threats before clients or Google discover them. Use findings to demonstrate the value of your security retainer.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Freelancers and consultants\u003C\u002Fstrong> — Add content-layer scanning to your cleanup and maintenance workflow. Catch what file scanners leave behind.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>E-commerce site owners\u003C\u002Fstrong> — Protect product descriptions and category pages from SEO spam that damages your search rankings and revenue.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security professionals\u003C\u002Fstrong> — Fill the database gap in your security stack with specialized content-layer analysis.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Gutenberg Block Editor Security\u003C\u002Fh4>\n\u003Cp>WordPress stores content as nested blocks — and attackers exploit this. Content Guard Pro includes a recursive Gutenberg block parser that inspects every layer of nested blocks, including reusable blocks and block patterns. It also scans content in the Classic Editor with a dedicated meta box for findings.\u003C\u002Fp>\n\u003Ch4>Serialized Data Inspector\u003C\u002Fh4>\n\u003Cp>Page builders like Elementor, Beaver Builder, and Divi store data as serialized PHP arrays. Content Guard Pro safely unserializes and recursively inspects these structures up to 10 levels deep, detecting malware hidden in keys like \u003Ccode>custom_css\u003C\u002Fcode>, \u003Ccode>custom_js\u003C\u002Fcode>, \u003Ccode>callback\u003C\u002Fcode>, \u003Ccode>raw_html\u003C\u002Fcode>, and more.\u003C\u002Fp>\n\u003Ch4>Performance You Can Trust\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Scans approximately 100 posts in 30–60 seconds on shared hosting\u003C\u002Fli>\n\u003Cli>Auto-throttling prevents timeouts and resource exhaustion\u003C\u002Fli>\n\u003Cli>Resumable scans survive server restarts\u003C\u002Fli>\n\u003Cli>Safe Mode activates automatically for large sites (over 2 million rows)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Developer-Friendly\u003C\u002Fh4>\n\u003Cp>Content Guard Pro provides hooks and filters for customization:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>content_guard_pro_loaded\u003C\u002Fcode> — Plugin initialization\u003C\u002Fli>\n\u003Cli>\u003Ccode>content_guard_pro_finding_saved\u003C\u002Fcode> — After a finding is stored\u003C\u002Fli>\n\u003Cli>\u003Ccode>content_guard_pro_detection_patterns\u003C\u002Fcode> — Modify or add detection rules\u003C\u002Fli>\n\u003Cli>\u003Ccode>content_guard_pro_allowlist_domains\u003C\u002Fcode> — Programmatic domain allowlisting\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>REST API available at \u003Ccode>\u002Fwp-json\u002Fcontent-guard-pro\u002Fv1\u002Ffindings\u003C\u002Fcode> for programmatic access (Premium Agency+ tiers).\u003C\u002Fp>\n\u003Ch4>External Services & Privacy\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>API Connection:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin connects to Content Guard Pro API (api.contentguardpro.com) for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Free tier activation tracking (site URL, WP version, PHP version, plugin version)\u003C\u002Fli>\n\u003Cli>License validation when a paid license key is entered\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>What is sent:\u003C\u002Fstrong> Site URL, site name, WordPress version, PHP version, plugin version, and admin email (free tier only). Sent once on activation via asynchronous, non-blocking request.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Privacy:\u003C\u002Fstrong> All data sent over HTTPS. No post content or scan data is ever transmitted. All scanning happens locally on your server.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Service provider:\u003C\u002Fstrong> Content Guard Pro Team\u003Cbr \u002F>\n\u003Cstrong>Terms:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fcontentguardpro.com\u002Fterms\" rel=\"nofollow ugc\">https:\u002F\u002Fcontentguardpro.com\u002Fterms\u003C\u002Fa>\u003Cbr \u002F>\n\u003Cstrong>Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fcontentguardpro.com\u002Fprivacy\" rel=\"nofollow ugc\">https:\u002F\u002Fcontentguardpro.com\u002Fprivacy\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Documentation & Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Documentation:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fcontentguardpro.com\u002Fdocs\" rel=\"nofollow ugc\">https:\u002F\u002Fcontentguardpro.com\u002Fdocs\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Support Forum:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcontent-guard-pro\u002F\" rel=\"ugc\">https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcontent-guard-pro\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Bug Reports:\u003C\u002Fstrong> WordPress.org support forum\u003C\u002Fli>\n\u003C\u002Ful>\n","Scan your WordPress database for hidden malware, spam links, and SEO injections that file-based security plugins miss. Gutenberg-aware.",233,"6.1","8.0",[155,21,22,156,157],"database-security","security-scanner","spam-detection","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontent-guard-pro","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontent-guard-pro.1.0.6.zip","2026-03-15T10:48:56.248Z",{"slug":162,"name":163,"version":164,"author":165,"author_profile":166,"description":167,"short_description":168,"active_installs":29,"downloaded":169,"rating":100,"num_ratings":48,"last_updated":170,"tested_up_to":16,"requires_at_least":115,"requires_php":171,"tags":172,"homepage":174,"download_link":175,"security_score":100,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"vulntitan","VulnTitan – Malware Scanner, Vulnerability Scanner & Security","2.1.6","Jaroslav Svetlik","https:\u002F\u002Fprofiles.wordpress.org\u002Fjerryscg\u002F","\u003Cp>VulnTitan is a WordPress security plugin focused on malware scanning and removal, vulnerability detection, file integrity monitoring, firewall protection, and comment anti-spam controls.\u003C\u002Fp>\n\u003Cp>Instantly scan your WordPress site for malware infections and known vulnerabilities, review detailed results, and clean or remove malware safely using a guided fix workflow with automatic backups.\u003C\u002Fp>\n\u003Cp>VulnTitan focuses on practical protection: vulnerability detection, malware scanning and removal, file integrity monitoring, firewall protection, comment anti-spam defense, hidden custom login access, and a weekly executive security digest every 7 days.\u003C\u002Fp>\n\u003Ch4>Malware Scanner\u003C\u002Fh4>\n\u003Cp>The WordPress malware scanner inspects your site files for suspicious code patterns and known malicious signatures.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Detect malware infections in core, plugins, and themes\u003C\u002Fli>\n\u003Cli>Review problematic files with contextual code preview\u003C\u002Fli>\n\u003Cli>Safe-fix workflow with automatic backups\u003C\u002Fli>\n\u003Cli>Clear severity indicators and actionable recommendations\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Vulnerability Scanner\u003C\u002Fh4>\n\u003Cp>The vulnerability scanner checks your installed WordPress core, plugins, and themes against a real-time vulnerability database powered by the VulnTitan API.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Detect vulnerable plugins and themes\u003C\u002Fli>\n\u003Cli>Identify outdated components with known security risks\u003C\u002Fli>\n\u003Cli>Real-time vulnerability intelligence\u003C\u002Fli>\n\u003Cli>Clear risk explanations and remediation guidance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>File Integrity Scanner\u003C\u002Fh4>\n\u003Cp>Monitor unauthorized file changes and unexpected modifications.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Baseline comparison for WordPress files\u003C\u002Fli>\n\u003Cli>Queue-based processing for performance safety\u003C\u002Fli>\n\u003Cli>Visual status legends for fast review\u003C\u002Fli>\n\u003Cli>Actionable next steps for suspicious changes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Firewall, Login & Comment Protection\u003C\u002Fh4>\n\u003Cp>VulnTitan includes firewall, WAF, login protection, and comment anti-spam controls to block common attack patterns and protect the WordPress login and comment surfaces.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Early MU-plugin runtime request guards\u003C\u002Fli>\n\u003Cli>SQL injection (SQLi) payload protection\u003C\u002Fli>\n\u003Cli>Command injection detection\u003C\u002Fli>\n\u003Cli>Suspicious path traversal blocking\u003C\u002Fli>\n\u003Cli>Endpoint whitelisting controls\u003C\u002Fli>\n\u003Cli>Login lockout protection against brute-force attacks\u003C\u002Fli>\n\u003Cli>TOTP-based two-factor authentication for selected roles\u003C\u002Fli>\n\u003Cli>Recovery codes and trusted-device support for enrolled accounts\u003C\u002Fli>\n\u003Cli>CAPTCHA protection for login, registration, lost-password, and optional comment forms\u003C\u002Fli>\n\u003Cli>XML-RPC allow, disable, or rate-limit policy controls with IP allowlisting\u003C\u002Fli>\n\u003Cli>Weak-password blocking during profile updates, password resets, and compatible registrations\u003C\u002Fli>\n\u003Cli>Comment Shield with honeypot, submit-time validation, duplicate detection, guest link limits, and IP rate limiting\u003C\u002Fli>\n\u003Cli>Suspicious comments can be held for moderation or blocked immediately\u003C\u002Fli>\n\u003Cli>Configurable custom login slug so administrators can use a private login URL instead of the default \u003Ccode>wp-login.php\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Default \u003Ccode>wp-login.php\u003C\u002Fcode> and guest \u003Ccode>wp-admin\u003C\u002Fcode> access can be hidden behind a \u003Ccode>404\u003C\u002Fcode> response when custom login is enabled\u003C\u002Fli>\n\u003Cli>Weekly executive security report email with 7-day firewall, login abuse, WAF, and comment spam statistics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Security-First Architecture\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Secure storage and cleanup of scan queues and logs\u003C\u002Fli>\n\u003Cli>Hardened backup handling outside \u003Ccode>ABSPATH\u003C\u002Fcode> by default\u003C\u002Fli>\n\u003Cli>Adaptive performance tuning for safe large-site scanning\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WP-CLI Support\u003C\u002Fh4>\n\u003Cp>VulnTitan supports WP-CLI commands for malware, integrity, and vulnerability scans so administrators can run checks from the terminal, scripts, or server automation.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>wp vulntitan scan malware\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp vulntitan scan integrity\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp vulntitan scan vulnerability\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp vulntitan scan all\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Optional flags: \u003Ccode>--scope=plugins\u003C\u002Fcode>, \u003Ccode>--format=json\u003C\u002Fcode>, \u003Ccode>--fail-on-findings\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to an external API at https:\u002F\u002Fvulntitan.com\u002Fapi\u002Fvulnerabilities to fetch up-to-date vulnerability data for WordPress core, plugins, and themes. This data is essential for detecting known vulnerabilities during scan operations.\u003C\u002Fp>\n\u003Cp>When a vulnerability scan is performed, the following data is sent to the VulnTitan API:\u003Cbr \u002F>\n– The slug and version of each plugin\u003Cbr \u002F>\n– The slug and version of each theme\u003Cbr \u002F>\n– The WordPress core version\u003C\u002Fp>\n\u003Cp>This data is transmitted only during scans initiated by the user or by scheduled scan settings. No personal, user-identifying, or sensitive site data is collected, transmitted, or stored.\u003C\u002Fp>\n\u003Cp>The external service is provided and operated by VulnTitan.com.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Terms of Service: https:\u002F\u002Fvulntitan.com\u002Fterms\u003C\u002Fli>\n\u003Cli>Privacy Policy: https:\u002F\u002Fvulntitan.com\u002Fprivacy\u003C\u002Fli>\n\u003C\u002Ful>\n","VulnTitan security toolkit for WordPress sites. Detect and remove malware, vulnerable plugins, risky file changes, and comment spam.",973,"2026-03-15T13:17:00.000Z","7.4",[21,22,173],"vulnerability-scanner","https:\u002F\u002Fvulntitan.com\u002Fvulntitan\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvulntitan.2.1.6.zip",{"attackSurface":177,"codeSignals":433,"taintFlows":703,"riskAssessment":749,"analyzedAt":767},{"hooks":178,"ajaxHandlers":296,"restRoutes":419,"shortcodes":420,"cronEvents":421,"entryPointCount":432,"unprotectedCount":432},[179,185,190,195,199,202,205,209,213,217,222,226,230,234,239,243,247,251,253,255,258,260,264,268,272,276,279,283,287,289,292],{"type":180,"name":181,"callback":182,"file":183,"line":184},"filter","cron_schedules","add_custom_cron_schedule","qtrAdminUsersMonitor.php",58,{"type":186,"name":187,"callback":188,"file":183,"line":189},"action","admin_init","check_admin_users",79,{"type":186,"name":191,"callback":192,"priority":193,"file":183,"line":194},"user_register","on_user_added",20,83,{"type":186,"name":196,"callback":197,"priority":130,"file":183,"line":198},"set_user_role","on_user_role_changed",84,{"type":186,"name":200,"callback":201,"priority":130,"file":183,"line":142},"delete_user","on_delete_user",{"type":186,"name":203,"callback":204,"priority":130,"file":183,"line":90},"deleted_user","on_user_removed",{"type":180,"name":181,"callback":206,"file":207,"line":208},"qtr_scanner_custom_cron_schedule","qtrAjaxHandler.php",48,{"type":186,"name":210,"callback":211,"file":207,"line":212},"qtr_internal_scan_cron_hook","on_qtr_scanner_internal_scan_cron_event",53,{"type":186,"name":214,"callback":215,"file":207,"line":216},"qtr_heur_internal_scan_cron_hook","on_qtr_scanner_heur_internal_scan_cron_event",55,{"type":180,"name":218,"callback":219,"priority":29,"file":220,"line":221},"rest_authentication_errors","on_rest_auth_errors","qtrBotProtection.php",173,{"type":186,"name":223,"callback":224,"priority":29,"file":220,"line":225},"xmlrpc_call","on_xmlrpc_call",176,{"type":186,"name":227,"callback":228,"priority":29,"file":220,"line":229},"wp_loaded","on_wp_loaded",179,{"type":186,"name":231,"callback":232,"priority":29,"file":220,"line":233},"template_redirect","on_template_redirect",182,{"type":186,"name":235,"callback":236,"file":237,"line":238},"init","maybe_handle_unlock_link","qtrBruteForce.php",123,{"type":180,"name":240,"callback":241,"priority":48,"file":237,"line":242},"authenticate","on_authenticate_gate",127,{"type":186,"name":244,"callback":245,"priority":130,"file":237,"line":246},"wp_login_failed","on_login_failed",128,{"type":186,"name":248,"callback":249,"priority":130,"file":237,"line":250},"wp_login","on_login_success",129,{"type":186,"name":223,"callback":224,"priority":29,"file":237,"line":252},132,{"type":186,"name":235,"callback":236,"file":237,"line":254},135,{"type":186,"name":244,"callback":245,"priority":130,"file":256,"line":257},"qtrLoginSecurity.php",36,{"type":186,"name":248,"callback":249,"priority":130,"file":256,"line":259},37,{"type":186,"name":261,"callback":262,"file":256,"line":263},"qtr_hourly_login_check","hourly_check_failures",59,{"type":186,"name":265,"callback":266,"file":256,"line":267},"qtr_daily_login_summary","daily_summary_failures",60,{"type":186,"name":269,"callback":270,"priority":48,"file":271,"line":76},"admin_enqueue_scripts","quttera_style","quttera_wm_scanner.php",{"type":186,"name":273,"callback":274,"file":271,"line":275},"admin_menu","qtr_setup_scanner_menu",44,{"type":186,"name":277,"callback":278,"file":271,"line":14},"plugins_loaded","closure",{"type":186,"name":280,"callback":281,"file":271,"line":282},"qtr_cleanup_expired_bot_blocks","CQtrBotProtection::CleanupExpiredBlocks",67,{"type":186,"name":284,"callback":285,"file":271,"line":286},"qtr_bot_cleanup_database","CQtrBotProtection::CleanupDatabaseTransients",72,{"type":180,"name":181,"callback":278,"file":271,"line":288},76,{"type":186,"name":187,"callback":290,"file":271,"line":291},"on_qtr_scanner_admin_init",787,{"type":180,"name":293,"callback":294,"priority":130,"file":271,"line":295},"plugin_action_links","qtr_wm_scanner_plugin_actions",801,[297,302,306,310,314,318,322,326,330,334,338,342,346,350,354,357,360,364,367,371,375,379,383,387,391,395,399,403,407,411,415],{"action":298,"nopriv":299,"callback":300,"hasNonce":299,"hasCapCheck":299,"file":271,"line":301},"scanner-run_scan",false,"CQtrAjaxHandler::RunExternalScan",91,{"action":303,"nopriv":299,"callback":304,"hasNonce":299,"hasCapCheck":299,"file":271,"line":305},"scanner-run_internal_scan","CQtrAjaxHandler::RunInternalScan",97,{"action":307,"nopriv":299,"callback":308,"hasNonce":299,"hasCapCheck":299,"file":271,"line":309},"scanner-run_heur_internal_scan","CQtrAjaxHandler::RunHeurInternalScan",99,{"action":311,"nopriv":299,"callback":312,"hasNonce":299,"hasCapCheck":299,"file":271,"line":313},"scanner-settings","CQtrAjaxHandler::UpdateSettings",101,{"action":315,"nopriv":299,"callback":316,"hasNonce":299,"hasCapCheck":299,"file":271,"line":317},"scanner-is_internal_scan_running","CQtrAjaxHandler::IsInternalScanNowRunning",103,{"action":319,"nopriv":299,"callback":320,"hasNonce":299,"hasCapCheck":299,"file":271,"line":321},"scanner-is_external_scan_running","CQtrAjaxHandler::IsExternalScanNowRunning",105,{"action":323,"nopriv":299,"callback":324,"hasNonce":299,"hasCapCheck":299,"file":271,"line":325},"scanner-get_log_lines","CQtrAjaxHandler::GetLogLines",107,{"action":327,"nopriv":299,"callback":328,"hasNonce":299,"hasCapCheck":299,"file":271,"line":329},"scanner-clean_log","CQtrAjaxHandler::CleanLogLines",109,{"action":331,"nopriv":299,"callback":332,"hasNonce":299,"hasCapCheck":299,"file":271,"line":333},"scanner-get_stats","CQtrAjaxHandler::GetStats",111,{"action":335,"nopriv":299,"callback":336,"hasNonce":299,"hasCapCheck":299,"file":271,"line":337},"scanner-stop_internal_scan","CQtrAjaxHandler::StopInternalScan",113,{"action":339,"nopriv":299,"callback":340,"hasNonce":299,"hasCapCheck":299,"file":271,"line":341},"scanner-get_detected_threats","CQtrAjaxHandler::GetDetectedThreatsReport",115,{"action":343,"nopriv":299,"callback":344,"hasNonce":299,"hasCapCheck":299,"file":271,"line":345},"scanner-get_ignored_threats","CQtrAjaxHandler::GetIgnoredThreatsReport",117,{"action":347,"nopriv":299,"callback":348,"hasNonce":299,"hasCapCheck":299,"file":271,"line":349},"scanner-ignore_threat","CQtrAjaxHandler::IgnoreThreat",119,{"action":351,"nopriv":299,"callback":352,"hasNonce":299,"hasCapCheck":299,"file":271,"line":353},"scanner-get_file_report","CQtrAjaxHandler::ScannerReport",121,{"action":355,"nopriv":299,"callback":356,"hasNonce":299,"hasCapCheck":299,"file":271,"line":238},"scanner-show_file","CQtrAjaxHandler::ShowFile",{"action":358,"nopriv":299,"callback":359,"hasNonce":299,"hasCapCheck":299,"file":271,"line":246},"scanner-unignore_threat","CQtrAjaxHandler::RemoveFromIgnoreList",{"action":361,"nopriv":299,"callback":362,"hasNonce":299,"hasCapCheck":299,"file":271,"line":363},"scanner-clean_ignore_list","CQtrAjaxHandler::CleanIgnoreList",130,{"action":365,"nopriv":299,"callback":366,"hasNonce":299,"hasCapCheck":299,"file":271,"line":252},"scanner-acknowledge_alarm","CQtrAjaxHandler::AcknowledgeAlarm",{"action":368,"nopriv":299,"callback":369,"hasNonce":299,"hasCapCheck":299,"file":271,"line":370},"scanner-get-alarms","CQtrAjaxHandler::GetAlarms",134,{"action":372,"nopriv":299,"callback":373,"hasNonce":299,"hasCapCheck":299,"file":271,"line":374},"scanner-whitelist_threat","CQtrAjaxHandler::WhiteListThreat",136,{"action":376,"nopriv":299,"callback":377,"hasNonce":299,"hasCapCheck":299,"file":271,"line":378},"scanner-clean_threats_whitelist","CQtrAjaxHandler::CleanThreatsWhiteList",138,{"action":380,"nopriv":299,"callback":381,"hasNonce":299,"hasCapCheck":299,"file":271,"line":382},"scanner-get-bruteforce-blocked-ips","CQtrAjaxHandler::GetBruteForceBlockedIPs",141,{"action":384,"nopriv":299,"callback":385,"hasNonce":299,"hasCapCheck":299,"file":271,"line":386},"scanner-remove-bruteforce-blocked-ip","CQtrAjaxHandler::RemoveBruteForceBlockedIP",142,{"action":388,"nopriv":299,"callback":389,"hasNonce":299,"hasCapCheck":299,"file":271,"line":390},"scanner-clear-all-bruteforce-blocked-ips","CQtrAjaxHandler::ClearAllBruteForceBlockedIPs",143,{"action":392,"nopriv":299,"callback":393,"hasNonce":299,"hasCapCheck":299,"file":271,"line":394},"scanner-get-bot-protection-blocked-ips","CQtrAjaxHandler::GetBotProtectionBlockedIPs",146,{"action":396,"nopriv":299,"callback":397,"hasNonce":299,"hasCapCheck":299,"file":271,"line":398},"scanner-remove-bot-protection-blocked-ip","CQtrAjaxHandler::RemoveBotProtectionBlockedIP",147,{"action":400,"nopriv":299,"callback":401,"hasNonce":299,"hasCapCheck":299,"file":271,"line":402},"scanner-clear-all-bot-protection-blocked-ips","CQtrAjaxHandler::ClearAllBotProtectionBlockedIPs",148,{"action":404,"nopriv":299,"callback":405,"hasNonce":299,"hasCapCheck":299,"file":271,"line":406},"scanner-get-bruteforce-stats","CQtrAjaxHandler::GetBruteForceStats",151,{"action":408,"nopriv":299,"callback":409,"hasNonce":299,"hasCapCheck":299,"file":271,"line":410},"scanner-get-botprotection-stats","CQtrAjaxHandler::GetBotProtectionStats",152,{"action":412,"nopriv":299,"callback":413,"hasNonce":299,"hasCapCheck":299,"file":271,"line":414},"scanner-whitelist_file","CQtrAjaxHandler::WhiteListFile",155,{"action":416,"nopriv":299,"callback":417,"hasNonce":299,"hasCapCheck":299,"file":271,"line":418},"scanner-clean_files_whitelist","CQtrAjaxHandler::CleanFilesWhiteList",157,[],[],[422,424,425,427,428,430],{"hook":210,"callback":210,"file":207,"line":423},104,{"hook":214,"callback":214,"file":207,"line":349},{"hook":261,"callback":261,"file":256,"line":426},50,{"hook":265,"callback":265,"file":256,"line":216},{"hook":280,"callback":280,"file":271,"line":429},65,{"hook":284,"callback":284,"file":271,"line":431},70,31,{"dangerousFunctions":434,"sqlUsage":452,"outputEscaping":492,"fileOperations":697,"externalRequests":28,"nonceChecks":48,"capabilityChecks":698,"bundledLibraries":699},[435,440,444,448],{"fn":436,"file":437,"line":438,"context":439},"unserialize","qtrFsSnapShot.php",153,"$list = unserialize($dump, ['allowed_classes' => false]);",{"fn":436,"file":441,"line":442,"context":443},"qtrOptions.php",41,"return unserialize($str, ['allowed_classes' => false]);",{"fn":445,"file":446,"line":438,"context":447},"exec","qtrScanLock.php","exec(\"TASKLIST \u002FFO LIST \u002FFI \\\"PID eq $pid\\\"\", $out);",{"fn":436,"file":449,"line":450,"context":451},"qtrSettings.php",1042,"$data = unserialize($serialized, ['allowed_classes' => false]);",{"prepared":453,"raw":454,"locations":455},24,16,[456,459,462,464,466,468,470,473,475,477,479,481,484,486,488,490],{"file":183,"line":457,"context":458},231,"$wpdb->query() with variable interpolation",{"file":183,"line":460,"context":461},257,"$wpdb->get_var() with variable interpolation",{"file":183,"line":463,"context":461},291,{"file":183,"line":465,"context":458},781,{"file":183,"line":467,"context":458},788,{"file":183,"line":469,"context":458},795,{"file":471,"line":472,"context":461},"qtrAlarmsManager.php",598,{"file":471,"line":474,"context":458},644,{"file":471,"line":476,"context":458},645,{"file":271,"line":478,"context":458},639,{"file":271,"line":480,"context":458},643,{"file":271,"line":482,"context":483},675,"$wpdb->get_results() with variable interpolation",{"file":271,"line":485,"context":483},685,{"file":271,"line":487,"context":483},694,{"file":271,"line":489,"context":483},707,{"file":271,"line":491,"context":483},716,{"escaped":493,"rawEcho":321,"locations":494},218,[495,499,501,503,505,507,509,511,513,514,516,518,521,523,525,527,529,532,535,538,540,542,544,545,546,549,550,552,554,557,559,561,562,563,565,566,568,570,572,574,576,578,580,582,584,586,588,589,590,591,592,594,596,598,600,602,604,606,608,610,612,614,616,617,620,622,624,625,626,628,630,631,633,634,636,638,640,642,644,646,648,650,651,653,655,657,659,661,663,665,667,669,671,673,675,676,678,679,682,684,686,688,690,692,694],{"file":496,"line":497,"context":498},"bot_protection_blocked_ips_page.php",15,"raw output",{"file":500,"line":28,"context":498},"brute_force_blocked_ips_page.php",{"file":502,"line":91,"context":498},"dashboard.php",{"file":502,"line":504,"context":498},520,{"file":502,"line":506,"context":498},521,{"file":502,"line":508,"context":498},522,{"file":502,"line":510,"context":498},523,{"file":502,"line":512,"context":498},602,{"file":502,"line":512,"context":498},{"file":502,"line":515,"context":498},619,{"file":502,"line":517,"context":498},677,{"file":519,"line":520,"context":498},"external_scan_page.php",4,{"file":519,"line":522,"context":498},5,{"file":519,"line":524,"context":498},247,{"file":519,"line":526,"context":498},269,{"file":519,"line":528,"context":498},271,{"file":530,"line":531,"context":498},"heur_internal_scan_page.php",2,{"file":533,"line":534,"context":498},"internal_scan_page.php",12,{"file":536,"line":537,"context":498},"JS\\bot_protection_frontend.php",25,{"file":536,"line":539,"context":498},191,{"file":536,"line":541,"context":498},226,{"file":543,"line":259,"context":498},"JS\\brute_force_frontend.php",{"file":543,"line":349,"context":498},{"file":543,"line":406,"context":498},{"file":547,"line":548,"context":498},"JS\\dashboard_frontend.php",39,{"file":547,"line":305,"context":498},{"file":547,"line":551,"context":498},217,{"file":547,"line":553,"context":498},287,{"file":555,"line":556,"context":498},"JS\\escan_frontend.php",27,{"file":555,"line":558,"context":498},163,{"file":560,"line":194,"context":498},"JS\\heur_iscan_frontend.php",{"file":560,"line":27,"context":498},{"file":560,"line":378,"context":498},{"file":560,"line":564,"context":498},159,{"file":560,"line":229,"context":498},{"file":560,"line":567,"context":498},301,{"file":560,"line":569,"context":498},354,{"file":560,"line":571,"context":498},370,{"file":560,"line":573,"context":498},506,{"file":560,"line":575,"context":498},546,{"file":560,"line":577,"context":498},563,{"file":560,"line":579,"context":498},601,{"file":560,"line":581,"context":498},620,{"file":560,"line":583,"context":498},641,{"file":560,"line":585,"context":498},666,{"file":587,"line":194,"context":498},"JS\\iscan_frontend.php",{"file":587,"line":27,"context":498},{"file":587,"line":378,"context":498},{"file":587,"line":564,"context":498},{"file":587,"line":229,"context":498},{"file":587,"line":593,"context":498},334,{"file":587,"line":595,"context":498},389,{"file":587,"line":597,"context":498},402,{"file":587,"line":599,"context":498},418,{"file":587,"line":601,"context":498},574,{"file":587,"line":603,"context":498},614,{"file":587,"line":605,"context":498},631,{"file":587,"line":607,"context":498},669,{"file":587,"line":609,"context":498},688,{"file":587,"line":611,"context":498},709,{"file":587,"line":613,"context":498},734,{"file":615,"line":282,"context":498},"JS\\scanner_log_frontend.php",{"file":615,"line":111,"context":498},{"file":618,"line":619,"context":498},"JS\\settings_frontend.php",308,{"file":207,"line":621,"context":498},485,{"file":207,"line":623,"context":498},496,{"file":207,"line":573,"context":498},{"file":207,"line":508,"context":498},{"file":207,"line":627,"context":498},547,{"file":207,"line":629,"context":498},630,{"file":207,"line":517,"context":498},{"file":207,"line":632,"context":498},706,{"file":207,"line":613,"context":498},{"file":207,"line":635,"context":498},803,{"file":207,"line":637,"context":498},824,{"file":207,"line":639,"context":498},850,{"file":207,"line":641,"context":498},859,{"file":207,"line":643,"context":498},914,{"file":207,"line":645,"context":498},940,{"file":207,"line":647,"context":498},969,{"file":207,"line":649,"context":498},971,{"file":207,"line":169,"context":498},{"file":207,"line":652,"context":498},1001,{"file":207,"line":654,"context":498},1003,{"file":207,"line":656,"context":498},1013,{"file":207,"line":658,"context":498},1114,{"file":207,"line":660,"context":498},1116,{"file":207,"line":662,"context":498},1118,{"file":207,"line":664,"context":498},1129,{"file":207,"line":666,"context":498},1183,{"file":207,"line":668,"context":498},1193,{"file":207,"line":670,"context":498},1195,{"file":672,"line":112,"context":498},"qtrFilesScannerTest.php",{"file":672,"line":674,"context":498},22,{"file":672,"line":556,"context":498},{"file":672,"line":677,"context":498},43,{"file":672,"line":14,"context":498},{"file":680,"line":681,"context":498},"qtr_faq_page.php",17,{"file":683,"line":531,"context":498},"qtr_howto_page.php",{"file":271,"line":685,"context":498},414,{"file":271,"line":687,"context":498},425,{"file":271,"line":689,"context":498},435,{"file":271,"line":691,"context":498},453,{"file":271,"line":693,"context":498},466,{"file":695,"line":696,"context":498},"scanner_log_page.php",11,32,13,[700],{"name":701,"version":38,"knownCves":702},"jQuery",[],[704,726,736],{"entryPoint":705,"graph":706,"unsanitizedCount":531,"severity":56},"qtr_wm_scanner_ajax_run_scan (quttera_wm_scanner.php:383)",{"nodes":707,"edges":723},[708,713,717],{"id":709,"type":710,"label":711,"file":271,"line":712},"n0","source","$_POST (x2)",444,{"id":714,"type":715,"label":716,"file":271,"line":712},"n1","transform","→ qtr_scanner_query()",{"id":718,"type":719,"label":720,"file":271,"line":721,"wp_function":722},"n2","sink","file_get_contents() [SSRF\u002FLFI]",822,"file_get_contents",[724,725],{"from":709,"to":714,"sanitized":299},{"from":714,"to":718,"sanitized":299},{"entryPoint":727,"graph":728,"unsanitizedCount":531,"severity":56},"\u003Cquttera_wm_scanner> (quttera_wm_scanner.php:0)",{"nodes":729,"edges":733},[730,731,732],{"id":709,"type":710,"label":711,"file":271,"line":712},{"id":714,"type":715,"label":716,"file":271,"line":712},{"id":718,"type":719,"label":720,"file":271,"line":721,"wp_function":722},[734,735],{"from":709,"to":714,"sanitized":299},{"from":714,"to":718,"sanitized":299},{"entryPoint":737,"graph":738,"unsanitizedCount":29,"severity":41},"\u003CqtrAjaxHandler> (qtrAjaxHandler.php:0)",{"nodes":739,"edges":746},[740,743],{"id":709,"type":710,"label":741,"file":207,"line":742},"$_POST (x7)",463,{"id":714,"type":719,"label":744,"file":207,"line":629,"wp_function":745},"echo() [XSS]","echo",[747],{"from":709,"to":714,"sanitized":748},true,{"summary":750,"deductions":751},"The quttera-web-malware-scanner plugin exhibits a concerning security posture, primarily due to its substantial attack surface lacking proper authentication. With 31 unprotected AJAX handlers, a vast majority of its entry points are exposed, making it a prime target for unauthorized access and execution of arbitrary actions. The presence of dangerous functions like 'unserialize' and 'exec' further exacerbates this risk, as they can be exploited to execute malicious code if untrusted input is processed.  While the plugin has a history of medium and low severity vulnerabilities, including SSRF, sensitive information exposure, and path traversal, the absence of currently unpatched CVEs is a positive sign. However, the taint analysis revealing two flows with unsanitized paths is a critical concern, suggesting potential for directory traversal or similar exploits even with the historical vulnerabilities addressed.",[752,754,757,759,761,763,765],{"reason":753,"points":130},"Large attack surface without authentication",{"reason":755,"points":756},"Dangerous functions (unserialize, exec) used",8,{"reason":758,"points":534},"Flows with unsanitized paths",{"reason":760,"points":520},"Medium severity CVE history",{"reason":762,"points":531},"Low severity CVE history",{"reason":764,"points":522},"Limited nonce checks",{"reason":766,"points":522},"Output not always properly escaped","2026-03-16T17:45:16.273Z",{"wat":769,"direct":775},{"assetPaths":770,"generatorPatterns":772,"scriptPaths":773,"versionParams":774},[771],"\u002Fwp-content\u002Fplugins\u002Fquttera-web-malware-scanner\u002FCSS\u002Fbootstrap.min.css",[],[],[],{"cssClasses":776,"htmlComments":777,"htmlAttributes":779,"restEndpoints":782,"jsGlobals":784,"shortcodeOutput":786},[],[778],"\u003C!-- FIXME - this image should be moved to wp.quttera.com -->",[780,781],"data-quttera-action","data-quttera-params",[783],"\u002Fwp-json\u002Fquttera-wm-scanner\u002Fv1\u002Fsettings",[785],"QutteraScannerAJAX",[]]