Skip to content
PluginCanary

Security Plugin, Firewall & Malware

Security Plugin, Firewall & Malware Scanner with Auto Removal
by CleanTalk Inc · 40,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 27 Oct 2026, 53 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Security Plugin, Firewall & Malware
Ownership100
Maintenance100
Security60
Support85
Reputation85

How the score works

Quick answers

Is Security Plugin, Firewall & Malware still maintained?
Yes. Last release 27 Oct 2026, 53 releases in the last 24 months. 27 Oct 2026 · wordpress.org
Who owns Security Plugin, Firewall & Malware, and has it changed hands?
No change recorded. Main committer shagimuratov since Aug 2016. 3 Nov 2026 · SVN log
Was Security Plugin, Firewall & Malware removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Security Plugin, Firewall & Malware safe?
7 known vulnerabilities, all fixed (latest in 2.191). Not on the exploited list. 28 Oct 2026 · Wordfence Intelligence
Is the latest Security Plugin, Firewall & Malware update safe to install?
No ownership change before 2.191. No one-star spike after it. 27 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
shagimuratov24 Aug 2016 to 29 Sep 2026, 286 commits
Safronik13 Nov 2016 to 2 Jun 2022, 844 commits
sartemd17416 May 2017 to 30 Jun 2020, 35 commits
glomberg29 Jul 2019 to 30 Sep 2026, 119 commits
alexandergull26 Jul 2022 to 14 Sep 2026, 51 commits
artemacleantalk20 Sep 2022 to 26 Oct 2023, 29 commits
sergefcleantalk8 Nov 2023 to 12 May 2026, 13 commits
antonv110 Jul 2024 to 3 Aug 2026, 20 commits
cleantalk1 Dec 2025 to 1 Dec 2025, 1 commits
cleantalkplugins28 Sep 2026 to 27 Oct 2026, 7 commits

New committer cleantalkplugins made a first commit on 28 Sep 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
53
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for Security Plugin, Firewall & Malware
Q1 20248
Q2 20249
Q3 20248
Q4 20248
Q1 20257
Q2 20255
Q3 20257
Q4 20258
Q1 20266
Q2 20267
Q3 20267
Q4 20262

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.6 (10 reviews). Lifetime: 4.8.

Average rating per quarter for Security Plugin, Firewall & Malware
Q4 20255.0
Q1 20264.7
Q2 20265.0
Q3 20265.0
Q4 20264.4

Average rating fell from 5.0 to 4.4 between Q4 2025 and Q4 2026.

Rating distribution
5 star367
4 star6
3 star3
2 star3
1 star19
Latest low reviews

Security record

5 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 2.191).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Security by CleanTalk <= 2.190 - Authenticated (Administrator+) Information Exposure2.7<= 2.1902.191Patched before disclosure
19 Aug 2026Security Plugin, Firewall & Malware Scanner with Auto Removal <= 2.184 - Unauthenticated SQL Injection7.5<= 2.1842.185Patched before disclosure
8 Dec 2025Login Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URL7.2<= 2.1682.169Patched before disclosure
11 Feb 2025Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload9.8<= 2.1492.150Patched before disclosure
25 Nov 2024Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection7.5<= 2.1452.145.1Patched before disclosure
6 Nov 2023Security & Malware scan by CleanTalk <= 2.120 - IP Spoofing to Protection Mechanism Bypass5.3<= 2.1202.121Patched before disclosure
6 Jul 2020Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization8.8<= 2.502.51Patched before disclosure

Changelog mentions of security fixes: 2.189 (security); 2.190 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

85% of 39 support threads resolved in the last 2 months.

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Security Plugin, Firewall & Malware
4 May 20261,932
11 May 202624,603
18 May 20264,196
25 May 202624,792
1 Jun 20263,171
8 Jun 202624,709
15 Jun 20263,502
22 Jun 202645,688
29 Jun 20263,917
6 Jul 202625,637
13 Jul 20263,276
20 Jul 202626,202
27 Jul 20263,317
3 Aug 202628,018
10 Aug 20263,273
17 Aug 202628,638
24 Aug 20264,343
31 Aug 202627,635
7 Sep 20263,453
14 Sep 202627,359
21 Sep 20264,051
28 Sep 202627,945
5 Oct 20264,833
12 Oct 202626,845
19 Oct 20264,619
26 Oct 202629,324
2 Nov 2026896

Weekly downloads over the last 4 weeks are 0% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

IP Location BlockScore 96 · 10,000+Wordfence SecurityScore 94 · 5,000,000+Sucuri SecurityScore 93 · 600,000+WP Content Copy Protection & No RightScore 93 · 100,000+NinjaFirewall (WP Edition)Score 93 · 100,000+

Facts

Version2.191
AuthorCleanTalk Inc
Added24 Aug 2016
Last updated27 Oct 2026
Active installs40,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.2
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tags2FA, login, malware, firewall, security

Other plugins by this author: Anti-Spam, Spam FireWall by CleanTalk, CleanTalk bbPress spam scanner, Spotfix - Report Website Errors, Typos & Public Chat

Questions

Is Security Plugin, Firewall & Malware still maintained?

Yes. Last release 27 Oct 2026, 53 releases in the last 24 months.

Who owns Security Plugin, Firewall & Malware, and has it changed hands?

No change recorded. Main committer shagimuratov since Aug 2016.

Was Security Plugin, Firewall & Malware removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Security Plugin, Firewall & Malware safe?

7 known vulnerabilities, all fixed (latest in 2.191). Not on the exploited list.

Is the latest Security Plugin, Firewall & Malware update safe to install?

No ownership change before 2.191. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue