PLUGIN SECURITY
Is Sucuri Scanner safe?
The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
What this plugin does
- Slug:
sucuri-scanner - Author: Sucuri
- 600000+ active installs
- 84/100 rating (384 reviews on wordpress.org)
- 36316775 all-time downloads
- On WordPress.org since 2011-11-18
firewallmalwarescansecurityspam
Maintenance status
- Latest known version: 2.7.4
- Last updated: 2026-07-07 3:41pm GMT
- Tested up to WordPress: 7.0.4
Known vulnerabilities
2 known CVEs on file for Sucuri Scanner. Reported between 2022 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-73033 | Sucuri Security – Auditing, Malware Scanner and Security Hardening [sucuri-scanner] <= 2.7.3 (unfixed) | — | Medium 6.5 | < 2.7.3 | 2.7.3 | 2026-08-10 | ✓ fixed in latest |
| CVE-2022-29489 | Sucuri Security – Auditing, Malware Scanner and Security Hardening [sucuri-scanner] < 1.8.34 | Cross-Site Request Forgery (CSRF) | Unknown | < 1.8.34 | 1.8.34 | 2022-09-14 | ✓ fixed in latest |
How to fix it
Keep Sucuri Scanner updated — 2.7.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Wordfence Security – Firewall, Malware Scan, and Login Security — 5000000+ active installs — 94/100 (4984) — max PHP 8.4
- Jetpack – WP Security, Backup, Speed, & Growth — 3000000+ active installs — 74/100 (2406)
- Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention — 1000000+ active installs — 96/100 (1478) — max PHP 8.4
- Security Optimizer – The All-In-One Protection Plugin — 1000000+ active installs — 90/100 (157) — max PHP <8.0
- All-In-One Security (AIOS) – Security and Firewall — 1000000+ active installs — 94/100 (1715)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.