Join Agency Program today.

2x Leads & 50% Cost Savings on Hosting. Join Agency Program today.

Apply Now
Log In
Get Started
WordPress Plugins
MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall

MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall

Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.
Rating:
4.3
star-rating-1star-rating-2star-rating-3star-rating-4star-rating-5
Active Installations:
200000+
Last Updated:
Oct 17, 2025
WordPress Version:
4.0 or higher
Tested up to:
6.8.3
Try Demo
Download

Complete Website Protection

MalCare offers the fastest malware detection and removal, automatic one-click malware removal, and powerful cloud-based firewall to ensure round-the-clock website protection against spam attacks.

Hassle

Free Security - With MalCare's intelligent scanning methodology, your WordPress site will never slow down and it accurately identifies complex malware that other popular security plugins miss.

Easy to Use

Set up an account in 60 seconds and configure security once, never look at it again. MalCare's user-friendly interface makes it simple for anyone to use, even without technical knowledge.

Premium Support

MalCare offers agile and responsive customer support, ensuring that you have the assistance you need whenever you need it.

Author’s Site Author Site view

6.02

  • Tweak: Improved Authentication

5.93

  • Tweak: Improvements in bulk upgrade

5.92

  • Tweak: Improvements in fetching File Stats

5.91

  • Tweak: Code Restructuring

5.88

  • Fix: Resolved compatibility issues with WordPress versions below 6.2.
  • Tweak: Added support for PHP 8.4

5.85

  • New: Added Gravity Forms support in Form Testing.
  • Tweak: Code Restructuring

5.81

  • Tweak: Enhanced Form Monitoring
  • Tweak: Improved Error Handling

5.77

  • New: Introduced WP Login Whitelabel
  • Tweak: Enhanced Two-Factor Authentication

5.73

  • Tweak: Improved handling for Two-Factor Authentication

5.72

  • New: Introduced Two-Factor Authentication
  • Tweak: Enhanced PHP Error Monitoring feature

5.68

  • Tweak: DB Version Update

5.67

  • Fix: Firewall uninstallation issue when using WP-CLI

5.65

  • New: Introduced Domain Monitoring feature
  • New: Introduced PHP Error Monitoring feature
  • Tweak: Implemented Captcha bypass support for Forminator and Gravity Forms
  • Tweak: Enhanced Firewall

5.56

  • Better handling for Activate Redirect

5.55

  • Updating classes in PHP Files

5.54

  • Adding SVG files.

5.53

  • UI Improvements.
  • Enhanced Firewall for greater robustness.
  • Manage Improvements.

5.47

  • Bug fix: Fetch Elementor DB details

5.45

  • Added Elementor DB Update Support

5.42

  • Enhanced Firewall
  • Added Maintenance Mode Support
  • Enhanced Whitelabel Functionality

5.41

  • Enhanced Firewall
  • Improved Authentication
  • Improved WooCommerce DB Update Support

5.38

  • Added WooCommerce 8.2.1 Real-Time-Backup support.
  • Enhanced Firewall for greater robustness
  • Enhanced WAF

5.25

  • Bug fix get_admin_url

5.24

  • WooCommerce DB Update Support
  • SHA256 Support
  • Stream Improvements

5.22

  • Code Improvements
  • Reduced Memory Footprint

5.16

  • Security Improvement: Upgraded Authentication

5.09

  • Manage Improvements

5.05

  • Code Improvements for PHP 8.2 compatibility
  • Firewall Enhancements
  • Manage Improvements

4.97

  • Firewall Improvements
  • Whitelabel improvements

4.87

  • Plugin Update Improvements
  • Theme Update Improvements

4.86

  • Whitelabel Improvements
  • Activity log Improvements for Core update

4.84

  • Bug fix: Handling WooCommerce update order hook

4.83

  • Geo-blocking with advanced firewall
  • Activity log improvements and bug fixes
  • Woocommerce custom table support for real-time backups

4.82

  • Firewall Improvements
  • Real-time Improvements
  • Improving coding standards
  • Code Improvements
  • Updated bootstrap

4.78

  • Improvements in identifying plugin and theme updates.

4.77

  • Improved the landing pages.
  • Enhanced future vulnerability protection
  • IP Blocking Improvements
  • Improved firewall configuration for migrations

4.76

  • Improvements in fetching file stats

4.75

  • Added the MalCare badge image

4.74

  • Enhanced handling of plugin services
  • Added functionality for realtime sync
  • Removed deprecated hook
  • Improvements in identifying plugin updates.

4.72

  • Sync Improvements

4.69

  • Improved network call efficiency for site info callbacks.

4.68

  • Removing use of constants for arrays for PHP 5.4 support.

4.67

  • Robust firewall-config checks

4.66

  • Post type fetch improvement.
  • Handing wing version for ipstore wing.

4.65

  • Making Login Protection more configurable.
  • Robust handling of requests params.
  • Callback wing versioning.

4.63

  • Updated the logos

4.62

  • MultiTable Sync in single callback functionality added.
  • Streamlined overall UI
  • Firewall Logging Improvements
  • Improved host info

4.61

  • Firewall Logging Improvements

4.59

  • Improved host info
  • Re-enabled plugin deactivation functionality from wp-admin for botprotection sites

4.58

  • Better Handling of error message from Server on signup
  • Fixed firewall caching issue
  • Minor bug fixes

4.57

  • Fixed services data fetch bug

4.56

  • Handling Activity Log corner case error

4.55

  • Activity Log for Woocommerce events
  • Minor Improvements in Firewall
  • Minor Improvements

4.54

  • Added Support For Multi Table Callbacks
  • Added Firewall Rule Evaluator
  • Added Activity Logs feature
  • Minor Improvements

4.53

  • New UI for registration page
  • Bug Fixes

4.52

  • Bug Fixes

4.51

  • Removed files and db access check
  • On uninstall remove prepend configuration
  • minor bug fixes

4.4

  • Disabling deactivate for botprotection accounts
  • Disconnect functionality through wpcli with params account_gid and account_type
  • Removed manual signup logic

4.33

  • Hiding bot protection dashboard from wp-admin

4.32

  • updating plugin name for cloudways server

4.31

  • Fetching Mysql Version
  • Robust data fetch APIs
  • Core plugin changes
  • Sanitizing incoming params
  • changed bvoverride cw name to manualsignup
  • plugin uninstall bug fix

4.27

  • Improved CSS
  • Wpcli V2 code
  • account disconnect option
  • plugin deactivate bug fix

4.23

  • Override bot protect over protect

4.22

  • Sending plugname in request to backend servers

4.21

  • Adding default parameter for MCWPAdmin constructor

4.2

  • Robust write callbacks
  • Improved and Robust prepend in Firewall Support
  • Without FTP cleanup and restore support

3.8

  • Updated MalCare landing page front-end

3.7

  • Removing deprecated get_magic_quotes_gpc function
  • Improving Firewall Logging

3.6

  • WPCli to server request path updated
  • Authentication header added in wpcli request param

3.5

  • Firewall in prepend mode
  • Robust Firewall and Login protection

3.4

  • Plugin branding fixes

3.2

  • Updating account authentication struture

3.1

  • Adding params validation
  • Adding support for custom user tables

2.1

  • Restructuring classes

1.91

  • Request profling and logging

1.89

  • Firewall improvements

1.88

  • Callback improvements
  • Adding delete transient callback

1.87

  • Checking Whitelisted IP’s first

1.86

  • Updating tested upto 5.1

1.84

  • Disable form on submit

1.83

  • Setting blocked page to be non-cacheable

1.82

  • Updating tested upto 5.0

1.81

  • Adding Geoblocking functionality

1.77

  • Adding function_exists for getmyuid and get_current_user functions

1.76

  • Removing create_funtion for PHP 7.2 compatibility

1.73

  • Ability to show captcha for all login blocked

1.72

  • Adding Misc Callback

1.71

  • Adding logout functionality in the plugin

1.69

  • Adding support for chunked base64 encoding

1.68

  • Updating upload rows

1.66

  • Updating TOS and privacy policies

1.64

  • Bug fixes for lp and fw

1.62

  • SSL support in plugin for API calls
  • Adding support for plugin branding

1.51

  • First Release

Well worth the money

By fxweb on November 6, 2025

Malware removed in a flash...worth every cent I pay

Given I don't pay for MalCare (yet)

By xtremetoonz on November 4, 2025

Given I don't pay for MalCare (yet), I was shocked to get a response to my inquiry about a particular suspected vulnerability VERY quickly! I don't think my ticket took even 15 minutes to get a response.

Great support and quick too

By mburnage on October 20, 2025

When you need help you need it quickly and that's exactly what i got, very happy customer

Flagged our Malware problem & fixed it

By fcarothers on October 14, 2025

Throughout our decade-plus experience maintaining 6 websites, we've experienced only one instance of malware. Although we were completely unaware that a snippet of code had been inserted into one of our business websites, Malcare found the dangerous code and was able to fully eliminate it from our website.

That code appeared to allow admin access to our website, which could have resulted in significant financial impact, but Malcare spotted the code, brought it to our attention for action, and eliminated the code before we experienced any problems.

That level of website repair requires a subscription, but the cost is reasonable and performance is excellent. Even their free website management offers a lot of benefits to anyone who is actively maintaining a Wordpress website.

In addition, Malcare provides an excellent level of customer support. We've required assistance only once, due to confusion over a revised Dashboard, but we received prompt and professional customer support.

We highly recommend using Malcare for website security.

Best Peace of Mind Ever!

By nexgraphics on October 10, 2025

I purchased the mega package to protect all my clients websites. The software and dashboard are easy to use, explanator, and support has been great! Any small things triggers a warning so I can get on top of things quickly and they are easy to reach for any questions! VERY HAPPY!

Amazingly prompt service

By hwd2023 on October 9, 2025

We submitted a ticket and within minutes it had been actioned and resolved. Amazing, thank you!

Malcare works if you don't use cloudflare firewall

By blessbuilding on October 8, 2025

I am glad I did not need to switch to Sitelock. Using Malcare I finally have no more infected files! Malcare team communicated with Arvixe my webhost and removed the infected files. It is important to note that if you have other websites that are not using the malcare plugin, this will allow viruses to enter those sites and cross infect to the site that does have Malcare. When this happens you will have a very hard time getting the malcare plugin to remove infected files. You will need to upgrade your plan to have all of your sites have the Malcare plugin.

The next hurdle we did not realize why we kept getting infected is because Malcare cannot auto scan your site if you have a cloudflare firewall. Ditch the cloudflare firewall and the malcare plugin works again to auto scan and clean.

in conclusion, get the multi site plan and do not use cloudflare firewall and the team at Malcare will be able to remove all of your malware. Before I realized this I would have given them 1 star but now that I follow these steps they are 5 star

Malcare - 5 Stars!

By afgindy on October 7, 2025

I've been using Malcare for over a year now and like many wordpress devs, have had issues with malware, especially on shared hosting environments. It's such a relief knowing that Malcare can quickly clean up just about any malicious issue that arises. Their support and remediation is super fast, and they are constantly adding new features to their service without nickel and diming the clients to death. I would highly recommend Malcare as an added layer of security, and ease of mind, for any Wordpress admin!

Great support and reliable plugin

By fisnikcanaj123 on October 6, 2025

I had an issue with spam posts, and the MalCare support team responded quickly and professionally. Everything is running smoothly now, and I'm really happy with their fast and friendly support. Highly recommend this plugin!

I highly recommend

By 101001101010e0101010100101 (nouraellm) on October 3, 2025

Malcare security care about what they provide to their users. My experience with the product was extremely positive. I highly recommend.

More Reviews
Try other plugins too!
Forget Spam Comment

Forget Spam Comment

The ultimate solution to stop spam comments in the default commenting system of WordPress

Try Demo More Details
WP Bouncer – Limit Simultaneous Logins

WP Bouncer – Limit Simultaneous Logins

Deter members from sharing login credentials: restrict simultaneous logins for the same user.

Try Demo More Details
BulletProof Security

BulletProof Security

WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam…

Try Demo More Details
Screenshots
Author Site Author Site

Try MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall With InstaWP

Try Demo

Contact Sales

Reach out to us to explore how InstaWP can benefit your business.