PluginScout

Malcure Malware Shield — WordPress Security Plugin

Malcure Malware Shield — Removal, Repair, Monitor

by Malcure Web Security · WordPress.org page · Website

v19.9.9 Tested up to WP 7.1.3 PHP 5.6+

Malcure Malware Shield has 10,000+ active installs on WordPress.org and 688,024 downloads all time. It was downloaded 8,401 times in the last 30 days. The last update was on October 12, 2026, tested up to WordPress 7.1.3.

Malcure Malware Shield at a glance

Active installs
10,000+
Total downloads
688,024
Downloads, last 30 days
8,401
30-day growth
–
downloads vs the previous 30 days

Is Malcure Malware Shield well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Current
tested up to WordPress 7.1.3, the current release is 7.1.3
One-star reviews
14%
10 of 74 reviews on WordPress.org

Malcure Malware Shield reviews and ratings

74 reviews on WordPress.org, with the most recent ones as their authors posted them.

4.4 out of 5

74 reviews

5★
61
4★
1
3★
1
2★
1
1★
10
  • Unprofessional credential demands, rigid script-based support, and a lack of und

    Malcure claims to be a website security company, yet their remediation process violates fundamental cybersecurity best practices. Demanding Master Account Logins: When hired to clean a single domain, their support team insisted on being handed the master logins to the primary IONOS Hosting Account. Handing over master access grants a third party full control over all domains, billing details, and unrelated client sites under that contract. Professional security firms use isolated access vectors, never master credentials. Inability to Adapt to Server Firewalls: Malcure rigidly demanded direct, external network access to the site's MySQL database. On secure cloud hosting like IONOS, databases are hidden behind strict internal firewalls that block outside IP addresses for safety. Malcure’s technicians refused to acknowledge this standard infrastructure limitation. Ignoring Full Developer Access: Even when provided with a comprehensive security package—including isolated SFTP access, a WordPress Administrator login, and a raw .sql database export file—Malcure refused to proceed. Because WordPress admin panels run locally inside the host's network loop, any standard security plugin can scan and clean the database internally. Malcure's refusal to work with these industry-standard assets suggests they rely blindly on automated external scripts rather than true technical expertise. Blame-Shifting and Stalling: By demanding impossible firewall openings and insecure master logins, the company sets up a convenient excuse ("the client denied us access") to justify delays or refuse refunds when they cannot fulfill their service. 💡 The Verdict If you value the security of your hosting infrastructure, avoid Malcure. Their rigid playbooks, unsafe credential requirements, and poor handling of shared hosting environments make them a liability rather than a security solution. If you have already paid them and they refuse to work using standard SFTP and WordPress Admin access, revoke t

    phillalf
  • Not working i have just tested with an hacked website

    Not working i have just tested with an hacked website not a single issues has been find out by the plugin.

    Appsfruit
  • great, slow at first, but gets fast with next turns

    fantastic. it lasts long, needs 3-4 scan turns, but it cleans malware. But the first scan is longest, every other gets faster. Tried 5 different plugins, this is the only one that hepled me out and identified malware. Sent them unidentified malware I found myself and they updated their definitions within 4 hours! After days of trouble, within 3 days it seems I got rid of malware on 6 sites. great

    nenadvuk
  • Saved my a**

    Thanks a lot for your work which we are allowed to use for free. Works very good, don't know if it really, really finds ALL malware - but who knows?!

    groso
  • Love and hate !!!!!!

    It's so annoying!!! Many positions force me to do things, like paying for upgrades.

    Jonathan Sin
  • Best of all i've tried

    good database scangood file scangood problems explication: it's possible to resolve a lot of problem using file editor and MySQL editing

    sdesan

Download and install history

10,307 downloads over the last 48 days. Snapshots taken daily from WordPress.org.

Downloads per day
Malcure Malware Shield downloads per day01.3k2.5k3.8k5kSep 5Sep 28Oct 22Downloads per day
Active installs
Malcure Malware Shield active installs02.5k5k7.5k10kSep 5Sep 28Oct 22Active installs
Rating out of 5
Malcure Malware Shield rating01.32.53.85Sep 5Sep 28Oct 22Rating out of 5
Reviews
Malcure Malware Shield review count0255075100Sep 5Sep 28Oct 22Reviews

Malcure Malware Shield alternatives

Plugins that solve the same problem, ranked by how closely they overlap with Malcure Malware Shield.

Details

Malware scanner and monitor.

The full description, screenshots and every review live on the WordPress.org page.

Rankings Malcure Malware Shield competes in

Tags

  • antivirus
  • malware scanner
  • security
  • virus
  • vulnerability scanner
Version
19.9.9
Last updated
Oct 12, 2026
First published
Jul 10, 2018
Requires WordPress
6.2
Tested up to
7.1.3
Requires PHP
5.6
Pricing
Free on WordPress.org

Malcure Malware Shield FAQ

How many active installs does Malcure Malware Shield have?

WordPress.org reports 10,000+ active installs for Malcure Malware Shield as of October 22, 2026.

Is Malcure Malware Shield still maintained?

Yes. The last release was on October 12, 2026 and it is tested up to WordPress 7.1.3.

Is Malcure Malware Shield free?

Malcure Malware Shield is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.