Malcure Plugin FAQs

Depending on the featureset, a WordPress security plugin may offer a single function or a holistic security solution. The typical expectations from a WordPress security plugin are protection, early vulnerability detection, scanning and cleanup in case of infection and monitoring site health and security.

Not all WordPress security plugins are built the same. The plugins can broadly be divided on the basis of the areas of functionality they offer. These areas are security-hardening, firewall, vulnerability-scanning, malware-scanning, malware-removal, security-monitoring.

• Security-hardening plugins: Strengthen the overall security of a WordPress site. Implement best practices for file permissions, database security, and user authentication. Disable unnecessary features that might expose the site to risks. Protect against common vulnerabilities like code injections and XSS attacks.
• Firewall Plugins: Block malicious traffic and prevent unauthorized access. Monitor and filter incoming and outgoing traffic. Block known malicious IP addresses and user agents. Protect against DDoS attacks, brute force login attempts, and other common threats.
• Vulnerability-Scanning Plugins: Identify weaknesses and potential security risks in the site’s code and configuration. Scan WordPress core files, themes, and plugins for known vulnerabilities. Provide reports on potential risks and suggestions for remediation. Often used by developers and administrators to ensure code integrity.
• Malware-Scanning Plugins: Detect malicious code and malware infections within the site. Scan files, database, and content for malware signatures and suspicious patterns. Alert administrators to potential infections. Often used in conjunction with malware-removal plugins for a complete solution.
• Malware-Removal Plugins: Clean and remove malware infections from the site. Identify and quarantine or delete malicious files and code. Restore altered or damaged files to their original state. Provide guidance on preventing future infections.
• Security-Monitoring Plugins: Continuously monitor and log security-related events and activities. Track user logins, file changes, failed login attempts, and other security-related events. Provide real-time alerts and detailed reports for analysis. Help in forensic analysis in case of a security breach.

Malcure WordPress Malware Scanner shines when it comes to WordPress malware scanning. The malware definitions and signatures are regularly updates and the scanning function is the most thorough. This means no malware goes undetected. It detects over 50,000+ types of malware.

1. No false-positives.
2. Full database scan.
3. Full file scan.
4. File inspection.
5. Hacked file cleanup & recovery.
6. Advanced options to narrow-down scan.
7. Custom malware-patterns search in files.
8. Custom malware-patterns search in the database.
9. Cleanup, deletion and whitelisting options.
10. Logs of last 30 days.
11. Verbose system-status report.
12. Configurable scan-rate and scan-speed.
13. Automatic definition updates.
14. Full-throttle integration with WP CLI.
15. Scheduling scans via WP CLI.

With Malcure Advanced Edition, this is a simple task since it has full-featured integration with WP CLI. This allows for extensive scripting and mass-deployment in large, scalable environments. On the webui, the scheduling feature is currently under active testing and is expected to be released very soon.

Yes and no. Security plugins with overlapping functionality are a no-no. However you can always use multiple security plugins as long as their areas of functionality do not overlap. For example, a malware scanning plugin can always be used in conjunction with a WordPress firewall plugin.

Actually there’s nothing at all to configure. We’ve kept it super easy. Perhaps the only settings you can configure is the scan-rate of files and the automatic update of definitions. Configuring a high-scan-rate can hog the CPU of a low-powered web-hosting server. A low-scan-rate can take a long time to complete the scan. Disabling automatic definition updates can help you rescan the site quickly when you are in the middle of a malware-cleanup or hacked website recovery.

Malcure WordPress Malware Plugin scans over 50,000+ types of malware in the WordPress database and filesystem. Additionally it checks the integrity of the core WordPress files. Remember, Malcure plugin is an on-demand scanner. Regular scanning ensures protection.

Every plugin however small, will have some performance impact on the server. When it comes to security plugins, the stakes are high. Security plugins allowing firewall, vulnerability-scanning or patching add some overhead to the server-performance. Ensure that your web-hosting server is not underpowered and that it can easily handle the load associated with running at least a small-business website.

You should immediately put your site under maintenance to avoid affecting your visitors and contact a professional wordpress malware removal expert.

Malcure Malware Scanner has a minimal firewall built-in to avoid the most common attacks. We are working to expand this functionality to a fully functioning firewall.

Yes. Malcure Malware Scanner Free edition is available in the WordPress Plugin repository.

Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal

You can use Malcure Forums for support. Premium support is offered with Malcure Advanced Edition.

A false positive means the scan flagging malware evne when one is genuinely not there and the site is fully clean. False positives are extremely rare with Malcure Malware Scanner. There though are some types of results that can be confusing. Invalid Scan Results: This means that the scan was unsuccessful. Suspicious or Unknown: This means that the scan was not able to determine if a file positively contains malware, but it is suspicious in nature.

The most common signs of a hacked WordPress site is malicious redirects, extremely slow website, a sudden drop in organic traffic to name a few.

Just head on to Malcure Malware Support Forums and create a thread. In order to validate a false positive or negative, we’ll need to examine the flagged data.

Typical permissions are 2755 for folders and 0644 for files. In case that doesn’t work, you can use 2775 for folders and 0664 for files.

WordPress has a dedicated security team and they are always on top of things. However the most common vulnerabilities are mostly rooted in third-party themes & plugins which can’t be reviewed for security vulnerabilities. Also some plugins and themes may have poor security-authentication, sanitization & data validation. Thus it is critical to keep your WordPress website updated with the latest updates. Using nulled themes or plugins is a stellar example of ‘shooting oneself in the foot’ as these have malicious links and backdoors built-in and will hijack the site.

Not all WordPress security plugins are built the same. The plugins can broadly be divided on the basis of the areas of functionality they offer. These areas are security-hardening, firewall, vulnerability-scanning, malware-scanning, malware-removal, security-monitoring. A wholistic plugin will have most of these features. However such a plugin can be very complex to develop and configure. For each of these security-domains you should have a dedicated plugin which excels in that specific area.

Using outdated plugins and themes exposes your website to security vulnerabilities, as hackers can exploit weaknesses to gain unauthorized access, inject malware, and potentially lead to data breaches. Regular updates are crucial to patch these vulnerabilities and maintain compatibility with the latest security measures.

A Web Application Firewall (WAF) is a security tool that safeguards web applications from cyber threats by monitoring and filtering incoming and outgoing traffic. It works by analyzing the data exchanged between users and the application, identifying and blocking potential malicious activities such as hacking attempts, data breaches, and code injections. WAFs use predefined rules, behavioral analysis, and sometimes AI to detect and prevent attacks, ensuring the web application’s security and data integrity.