WordPress plugin
Pro Upgrade
Malcure Malware Shield scans WordPress documents, real-time file uploads, databases, and user accounts. It reports findings by file path or database record, including backdoors, shells, obfuscated code, database injections, hidden administrator accounts, and malware concealed in picture files.
Tools for handling scan findings
Malcure Malware Shield scans WordPress documents, real-time file uploads, databases, and user accounts. It reports findings by file path or database record, including backdoors, shells, obfuscated code, database injections, hidden administrator accounts, and malware concealed in picture files.
The base add-on includes detection, scheduled scans, email alerts, threat intelligence, a weekly security pulse email, a firewall, and hardening. Free registration and a Malcure Cloud connection are required for the plugin to function. Pro Upgrade and Malcure Advanced Edition add utilities for reviewing and acting on findings.
Choose how to address a finding
- Repair files: Restore infected files from the official source through Malcure Cloud.
- Delete files: Remove infected or irreparable files directly.
- Whitelist items: Suppress alarms for selected files and database records.
- Inspect files: Review suspicious or infected files inline, without switching to FTP, SSH, or a file manager.
Review suspicious code carefully before remediation. If a scan identifies code as suspicious rather than clearly malicious, inspect the file before deciding whether to repair, delete, or whitelist it.
Control scans and review results
Advanced scan filters can include or exclude directories and apply custom regular-expression signatures to files and database content. WP-CLI commands support scan and security tasks, including asynchronous scans, definition synchronization, checksum refresh, and reporting. The clipboard reporting tool lets you copy scan results for client reports.
Malware definitions are checked hourly through a cron process. Diagnostics show the full PHP configuration, and a one-click factory reset returns the plugin to its factory state. Premium support includes direct access to security analysts.
Install and start scanning
Install and activate Malcure Malware Shield in WordPress, open the Malcure menu, and follow its wizard to start the first scan. Review the reported file paths, line numbers, or database records, then configure scheduled scans and alerts. The plugin scans when prompted or scheduled rather than continuously running heavy background processes. Add Pro Upgrade or Malcure Advanced Edition when you need the remediation, filtering, command-line, diagnostic, or support tools.