--- title: "Malcure Advanced Edition — Malware Removal + Monitoring Plugin for WordPress" date: 2019-07-22 author: "Shiv" featured_image: "https://malcure.com/wp-content/uploads/2025/01/malcure-advanced-edition-plugin-dashboard.png" --- # Malcure Advanced Edition — Malware Removal + Monitoring Plugin for WordPress ## Stop Reacting. Start Securing — An essential for any WordPress site Clean infections in files + database, then keep **watch** with **scheduled monitoring** and ***alerts***. Malcure **verifies integrity** with checksums and logs changes for post-cleanup assurance. Built for **agencies, developers, and site owners who need *proven integrity***. ### Scan • Repair • Delete ⇔ Event-Logging • Monitoring & Alerting [Get Advanced Edition →](#adv-features-head) ## Detected what other scanners missed—The most effective plugin for WordPress! ⭐⭐⭐⭐⭐ > Last night I tried almost all the scanners available in the repository, only Malcure detected the problematic files, the others (including Sucuri and iThemes), skipped them and pointed out that my site had no problems. ![Jorge Ocampo's review for WordPress Malware Removal Plugin](https://malcure.com/wp-content/uploads/2019/08/jorge-ocampo.jpg)Jorge Ocampo [@jorgeocampo](https://wordpress.org/support/topic/life-saver-436/ "View Testimonial") ## …and Malcure **Advanced Edition** has WP-CLI + Large-Site Scanning for Agencies & Developers… Malcure Advanced Edition gives ninja powers to web-security professionals for scanning & fixing exceptionally large websites and broken WordPress installs with great ease. Malcure Advanced Edition has full-blown integration with WP CLI for WordPress. You can now scan your WordPress website even without using a web browser. [View all features →](#adv-features-head) ![Malcure Advanced Edition, WordPress Malware Scanner](https://malcure.com/wp-content/uploads/2025/01/malcure-advanced-edition-plugin-dashboard.png "Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal")581,044+ ### plugin downloads 16+ yrs. ### in cyber-security 75+ ### plugin contributions 99% ### customer satisfaction 5,600+ ### malware definitions ## Malcure Advanced Edition — the GOAT ### Malware Removal + Continuous Malware-Free Assurance for WordPress Malcure Advanced Edition is the **best malware detection and removal plugin**. With our intelligent full-find infection scanning technology, we are able to detect malware and infections that others miss! From WordPress files and databases to hidden files, archives, images, and even backups, Malcure Advanced Edition scans each and every file on your WordPress install for security threats. **Includes vulnerability checks, event-log and monitoring to catch reinfections early.** Nothing escapes Malcure WordPress Malware Scanner! ### Forensic Scan (Files + Database) We don’t just skim `wp-content`. Malcure audits **database records**, core files, raw images, and archives (as raw files). We identify SEO spam injected into posts and obfuscated backdoors hidden even in image files. ### Checksums Integrity Verification Why guess? We verify your core files, themes, and plugins against **official WordPress checksums** via our API. If a file doesn’t match the repository original—or has changed by one byte—we flag it. **Near-zero false positives.** ### Headless WP-CLI Diagnostics Site white-screened? Admin panel locked? No problem. Use our **native WP-CLI integration** to scan files, export infection logs, and check status directly from the command line. ### On Demand & Automated Scans Initiate malware scans for your WordPress site instantly with a single click, or effortlessly schedule regular scans via WP CLI. ### Research-driven Malware Signatures Our dedicated security research team continuously identifies new virus strains, frequently updating malware signatures and definitions to ensure complete protection. ### Free plugin in WordPress Repository Want to try Malcure Malware Scanner for free? [Download our free plugin](https://wordpress.org/plugins/wp-malware-removal/) from WordPress repository and give it a try before upgrading to the premium version! ## Trusted by web-security agencies to eliminate even the most challenging infections from WordPress - Checks integrity of the WordPress core files & plugins - Scans files + database for infections / injections - Checks for viruses and infections using regularly updated malware signatures - Detects plugin & theme vulnerabilities before site gets infected - Ultra-high-precision results - Auto-sync with WordPress Checksum API - Paranoia mode to show potential, loosely-suspicious matches - Front-end file inspector to quickly review the infected files - Connect to Google™ Search Console to fetch any warnings or notices issued by Google™ - Extremely Lightweight - Works out of the box - **Attack Surface Hardening** to block bot probes and traffic anomalies. ## Tap into the raw power of Malcure Advanced Edition #### Malware Removal, Reinfection Monitoring & Security Event Log **…for security professionals who need advanced power and control…** - **Full Comprehensive DeepScan™:** Scans WordPress core, themes, plugins, uploads, binaries, files, database and even vulnerabilities. - **Checksum Verification:** Auto-verify WP Core integrity against the official API. - **Vulnerability Scan:** Identify risky plugins/themes that commonly lead to reinfection. - **Custom Pattern Definitions:** Add your own regex signatures to hunt specific threat vectors. - **File & Database Inspection:** Isolate specific infected Files and DB rows without dropping whole tables. - **1-Click Actions:** Repair, quarantine, or delete flagged items individually. Precision control, not a “nuke-all” button. - **Security Event Log (100 days):** See what changed, when it changed, and what to investigate after cleanup. - **Scheduled scans & Alerts:** Watchdog Monitor for early detection of re/infection(s) and unexpected changes on a set cadence. - **Smart Whitelisting:** Permanently ignore known custom files or dev assets. - **WP-CLI Automation:** Pipe scan results to other tools or scripts. ideal for CI/CD pipelines. ### Malcure Advanced Edition Experience the state-of-the-art technology for scanning & detecting malware on any WordPress install #### Single Site $247 **$149.00** ANNUALLY License for 1 Site Purchase Now → [Review Your Order →](https://malcure.com/about-malcure/checkout/) Added to cart #### Agency Plan $347 **$257.00** ANNUALLY License for 25 Sites Purchase Now → [Review Your Order →](https://malcure.com/about-malcure/checkout/) Added to cart Need more sites? [Click here to contact us about our custom plans →](https://malcure.com/about-malcure/contact-us/) ## Frequently Asked Questions ### Does Malcure scanner work with latest WordPress version? Yes, Malcure is compatible with the latest version of WordPress. ### How do I configure the settings in Malcure Malware Scanner? Actually there’s nothing much to configure. We’ve kept it super easy. Perhaps the only few settings you can configure are the scan-schedule, the scan-rate of files and the automatic update of definitions. Configuring a high-scan-rate can hog the CPU of a low-powered web-hosting server. A low-scan-rate can take a long time to complete the scan. Disabling automatic definition updates can help you rescan the site quickly when you are in the middle of a malware-cleanup or hacked website recovery. ### What types of threats can Malcure Advanced Edition plugin protect against? Malcure WordPress Malware Scanner Plugin scans over 50,000+ types of known malware including variants like C99, R57, RootShell, dolohan, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx and many more in the WordPress database and filesystem. Additionally it checks the integrity of the core WordPress files. Remember, Malcure plugin comes with both: 1) On-demand scanner, 2) Automatic Scanner for Monitoring and early detection. ### Is there a performance impact when using the Malcure Malware Scanner plugin? Every plugin however small, will have some performance impact on the server. When it comes to security plugins, the stakes are high. Security plugins allowing firewall, vulnerability-scanning or patching add some overhead to the server-performance. Ensure that your web-hosting server is not underpowered and that it can easily handle the load associated with running at least a small-business website. ### Is there a free version of the Malcure Plugin? Yes, [Malcure Malware Scanner](https://wordpress.org/plugins/wp-malware-removal/) Free edition is available in the WordPress Plugin repository. ### How do I get support for the Malcure Malware Scanner Plugin? You can use [Malcure Forums for support](https://malcure.com/forums/). For Malcure Advanced Edition we provide premium support over email. ### Is “1-Click” a “Nuke-All” button? No. It means you can execute **one-click actions per flagged item** (Repair or Delete). You maintain full control over every file we touch. Bulk actions break sites and are risky. ### Is Malcure just a cleanup tool, or should I keep it installed? Malcure is built for malware scanning, cleanup and monitoring. This functionality is critical for any website that means business. Most malware infections go undetected unless symptoms are obvious or reported. By the time you respond, it’s often too late. Malcure Advanced Edition catches and reports malware even if there are no obvious symptoms and emails you immediately. ### Can Malcure run scheduled scans (daily/weekly/monthly)? Yes. Malcure supports recurring scheduled scans using daily/weekly/monthly cadence options. Regular scanning helps detect reinfections early and supports ongoing site hygiene. ### What is checksum-based integrity verification? Integrity verification compares WordPress core (and supported components) against known-good checksum data. If file integrity fails, the DeepScan runs additional scanning passes to check whether it’s positively malware-infected or not. It helps you confirm what changed after updates or incidents and quickly spot tampered files. ### What is the Event Monitor / Event Log used for? The Event Monitor provides a rolling event log (about 100 days) of security-relevant activity. It helps incident response by showing when changes happened, supporting investigation, and documenting remediation work. ### Will Malcure email me when something is found? Malcure can send an **email notification when a scan completes** (including whether issues were detected). It’s not a real-time WAF alert feed; notifications are tied to **scan completion/cancellation**, and email delivery depends on your WordPress email setup (host/SMTP). ### Does Malcure include a full Web Application Firewall (WAF)? Malcure includes **lightweight request hardening** (for example: blocking REST user listing and author enumeration, plus basic upload/PHP and path traversal protections). For full edge-level WAF/CDN protection, you can pair both approaches. ### Can I run Malcure scans using WP-CLI? Yes (Advanced Edition). WP-CLI workflows let you run scans and automate repeatable security checks from the command line, which is especially useful if the host blocks your site or when wp-admin is unstable or when you manage multiple sites. [Where can I learn more about Malcure Advanced Edition?](https://malcure.com/malware-removal-plugin/malcure-plugin-faqs/) ## Plugin Reviews — Malcure WP Malware Scanner & Firewall