Malcure Advanced Edition — Malware Removal + Monitoring Plugin for WordPress

Yes, Malcure is compatible with the latest version of WordPress.

Actually there’s nothing much to configure. We’ve kept it super easy. Perhaps the only few settings you can configure are the scan-schedule, the scan-rate of files and the automatic update of definitions. Configuring a high-scan-rate can hog the CPU of a low-powered web-hosting server. A low-scan-rate can take a long time to complete the scan. Disabling automatic definition updates can help you rescan the site quickly when you are in the middle of a malware-cleanup or hacked website recovery.

Malcure WordPress Malware Scanner Plugin scans over 50,000+ types of known malware including variants like C99, R57, RootShell, dolohan, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx and many more in the WordPress database and filesystem. Additionally it checks the integrity of the core WordPress files. Remember, Malcure plugin comes with both: 1) On-demand scanner, 2) Automatic Scanner for Monitoring and early detection.

Every plugin however small, will have some performance impact on the server. When it comes to security plugins, the stakes are high. Security plugins allowing firewall, vulnerability-scanning or patching add some overhead to the server-performance. Ensure that your web-hosting server is not underpowered and that it can easily handle the load associated with running at least a small-business website.

Yes, Malcure Malware Scanner Free edition is available in the WordPress Plugin repository.

You can use Malcure Forums for support. For Malcure Advanced Edition we provide premium support over email.

No. It means you can execute one-click actions per flagged item (Repair or Delete). You maintain full control over every file we touch. Bulk actions break sites and are risky.

Malcure is built for malware scanning, cleanup and monitoring. This functionality is critical for any website that means business. Most malware infections go undetected unless symptoms are obvious or reported. By the time you respond, it’s often too late. Malcure Advanced Edition catches and reports malware even if there are no obvious symptoms and emails you immediately.

Yes. Malcure supports recurring scheduled scans using daily/weekly/monthly cadence options. Regular scanning helps detect reinfections early and supports ongoing site hygiene.

Integrity verification compares WordPress core (and supported components) against known-good checksum data. If file integrity fails, the DeepScan runs additional scanning passes to check whether it’s positively malware-infected or not. It helps you confirm what changed after updates or incidents and quickly spot tampered files.

The Event Monitor provides a rolling event log (about 100 days) of security-relevant activity. It helps incident response by showing when changes happened, supporting investigation, and documenting remediation work.

Malcure can send an email notification when a scan completes (including whether issues were detected). It’s not a real-time WAF alert feed; notifications are tied to scan completion/cancellation, and email delivery depends on your WordPress email setup (host/SMTP).

Malcure includes lightweight request hardening (for example: blocking REST user listing and author enumeration, plus basic upload/PHP and path traversal protections). For full edge-level WAF/CDN protection, you can pair both approaches.

Yes (Advanced Edition). WP-CLI workflows let you run scans and automate repeatable security checks from the command line, which is especially useful if the host blocks your site or when wp-admin is unstable or when you manage multiple sites.