PLUGIN SECURITY
Is MalCare WordPress Security Plugin - Malware Scanner, Cleaner, Security Firewall safe?
Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.
What this plugin does
- Slug:
malcare-security - Author: malcare
- 200000+ active installs
- 88/100 rating (546 reviews on wordpress.org)
- 18433872 all-time downloads
- On WordPress.org since 2018-01-30
firewallmalware removalmalware scannervulnerabilitieswordpress security
Maintenance status
- Latest known version: 6.62
- Last updated: 2026-08-25 8:04am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.0+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for MalCare WordPress Security Plugin - Malware Scanner, Cleaner, Security Firewall. Reported between 2021 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-19718 | MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall [malcare-security] < 6.65 | Improper Authentication | Unknown | < 6.65 | 6.65 | 2026-08-26 | ⚠ update needed |
| — | MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall [malcare-security] < 4.58 | — | Unknown | < 4.58 | 4.58 | 2021-05-05 | ✓ fixed in latest |
How to fix it
Keep MalCare WordPress Security Plugin - Malware Scanner, Cleaner, Security Firewall updated — 6.62 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Wordfence Security – Firewall, Malware Scan, and Login Security — 5000000+ active installs — 94/100 (4979) — max PHP 8.4
- Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention — 1000000+ active installs — 96/100 (1477) — max PHP 8.4
- Security Optimizer – The All-In-One Protection Plugin — 1000000+ active installs — 90/100 (157) — max PHP <8.0
- All-In-One Security (AIOS) – Security and Firewall — 1000000+ active installs — 94/100 (1715)
- Sucuri Security – Auditing, Malware Scanner and Security Hardening — 600000+ active installs — 84/100 (384)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.