Malcure Malware Shield
Healthy: released 23 days ago, tested with WordPress 7.1, no open vulnerabilities.
Based on 4 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 75 |
| Support | No data |
| Reputation | 70 |
Quick answers
- Is Malcure Malware Shield still maintained?
- Yes. Last release 12 Oct 2026, 101 releases in the last 24 months. 12 Oct 2026 · wordpress.org
- Who owns Malcure Malware Shield, and has it changed hands?
- No change recorded. Main committer malcure since Oct 2019. 4 Nov 2026 · SVN log
- Was Malcure Malware Shield removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Malcure Malware Shield safe?
- 4 known vulnerabilities, all fixed (latest in 19.9.7). Not on the exploited list. 25 Sep 2026 · Wordfence Intelligence
- Is the latest Malcure Malware Shield update safe to install?
- No ownership change before 19.9.9. No one-star spike after it. 12 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| varun21 | 10 Jul 2018 to 16 Oct 2019, 125 commits |
|---|---|
| malcure | 19 Oct 2019 to 12 Oct 2026, 365 commits |
2 committers recorded. No ownership changes recorded since 2018.
Maintenance
- Last release
- 23 days ago
- Releases, 24 months
- 101
- Tested up to
- 7.1 current
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 19 |
| Q3 2025 | 51 |
| Q4 2025 | 15 |
| Q1 2026 | 5 |
| Q2 2026 | 4 |
| Q3 2026 | 6 |
| Q4 2026 | 1 |
Last release 12 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: 1.0 (1 review). Lifetime: 4.4.
| Last 90 days | 1.0 |
|---|---|
| Lifetime | 4.4 |
| Q1 2024 | 5.0 |
|---|---|
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q1 2025 | 4.2 |
| Q2 2025 | 5.0 |
| Q3 2025 | 3.0 |
| Q4 2025 | 5.0 |
| Q1 2026 | 5.0 |
| Q2 2026 | 5.0 |
| Q3 2026 | 1.0 |
Average rating fell from 5.0 to 1.0 between Q1 2024 and Q3 2026.
| 5 star | 61 |
|---|---|
| 4 star | 1 |
| 3 star | 1 |
| 2 star | 1 |
| 1 star | 10 |
- Unprofessional credential demands, rigid script-based support, and a lack of und · 1 star · 25 Sep 2026
- Not working i have just tested with an hacked website · 1 star · 22 Jul 2026
- Can’t close annoying message · 1 star · 3 Mar 2025
Security record
4 vulnerabilities in 24 months, all patched (latest fixed in 19.9.7).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 25 Sep 2026 | Malcure Malware Shield <= 19.9.6 - Missing Authorization | 6.5 | <= 19.9.6 | 19.9.7 | Before disclosure |
| 3 Sep 2025 | Malcure Malware Scanner <= 16.8 - Missing Authorization | 4.3 | <= 16.8 | 16.9 | Before disclosure |
| 15 Jul 2025 | Malcure Malware Scanner - #1 Toolset for WordPress Malware Removal <= 17.0 - Authenticated (Subscriber+) Arbitrary File Deletion | 8.1 | <= 17.0 | 17.1 | 135 |
| 12 Jun 2025 | Malcure Malware Scanner - #1 Toolset for WordPress Malware Removal <= 16.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read | 6.5 | <= 16.8 | 16.9 | 34 |
Changelog mentions of security fixes: 19.9.7 (security).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 299 |
|---|---|
| 11 May 2026 | 878 |
| 18 May 2026 | 1,122 |
| 25 May 2026 | 4,919 |
| 1 Jun 2026 | 1,749 |
| 8 Jun 2026 | 1,149 |
| 15 Jun 2026 | 820 |
| 22 Jun 2026 | 725 |
| 29 Jun 2026 | 4,905 |
| 6 Jul 2026 | 11,892 |
| 13 Jul 2026 | 6,515 |
| 20 Jul 2026 | 1,259 |
| 27 Jul 2026 | 5,234 |
| 3 Aug 2026 | 6,151 |
| 10 Aug 2026 | 1,082 |
| 17 Aug 2026 | 915 |
| 24 Aug 2026 | 850 |
| 31 Aug 2026 | 758 |
| 7 Sep 2026 | 654 |
| 14 Sep 2026 | 910 |
| 21 Sep 2026 | 666 |
| 28 Sep 2026 | 812 |
| 5 Oct 2026 | 558 |
| 12 Oct 2026 | 5,701 |
| 19 Oct 2026 | 1,426 |
| 26 Oct 2026 | 1,239 |
| 2 Nov 2026 | 130 |
Weekly downloads over the last 4 weeks are 9% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score. Never sponsored.
Facts
| Full name | Malcure Malware Shield - Removal, Repair, Monitor |
|---|---|
| Version | 19.9.9 |
| Author | Malcure Web Security |
| Added | 10 Jul 2018 |
| Last updated | 12 Oct 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 6.2 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.6 |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | virus, security, antivirus, malware scanner, vulnerability scanner |
Questions
Is Malcure Malware Shield still maintained?
Yes. Last release 12 Oct 2026, 101 releases in the last 24 months.
Who owns Malcure Malware Shield, and has it changed hands?
No change recorded. Main committer malcure since Oct 2019.
Was Malcure Malware Shield removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Malcure Malware Shield safe?
4 known vulnerabilities, all fixed (latest in 19.9.7). Not on the exploited list.
Is the latest Malcure Malware Shield update safe to install?
No ownership change before 19.9.9. No one-star spike after it.