Plugin profile · observed daily since 02 Aug 2026
MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall
Active installs100,000+ rounded
Current authormalcare
Owner changesNone while we have been watching
Last release9 days ago 30 Oct 2026
Support2 / 2 resolved, last 2 months
Releases on record89
Rating4.4 /5 · 559
Added to directory30 Jan 2018
Requires WP4.0
Requires PHP7.0
Version lag0 up to date
Tested up toWP 7.1.4 up to date
PluginsPedia reports published data and observable changes. It does not rate plugin quality or safety, infer intent, or make recommendations. These are observations rather than a verdict. How this works
Ownership
Held by malcare throughout, with no change of ownership observed since daily tracking began on 02 Aug 2026.
Full observed history, including every field transition
Committing accounts
Read from the plugin’s public release log, so these predate this registry. A committing account is not an owner. Thirty accounts commit to WooCommerce and it has never changed hands.
| Account | Releases | First | Last |
|---|---|---|---|
| ritesh.soni36 | 84 | 05 Jul 2019 | 30 Jul 2026 |
This registry did not observe a transfer; it read these names off a public log. Whether that reflects a change of ownership is not something the directory publishes.
Adoption
How widely the plugin is installed, and what the people running it think of it. WordPress.org rounds install figures to one significant digit, so they describe an order of magnitude rather than a headcount.
Very widely adopted: 100,000+ active installs. In the top tier of the directory by install count.
1,060 downloads a day over the last 7 days, falling 13% against the 7 days before. Downloads are counted exactly and without a ceiling, so they show movement the rounded install figure cannot.
11 Sep 2026peak 43,908/day31 Oct 2026
17 ratings left in the last 82 days, averaging 4.6 out of 5 against a lifetime average of 4.4 (2 of them one or two stars). Recent ratings are in line with the lifetime figure.
Install band fell to 100,000+ on 16 Sep 2026, from 200,000+. Both figures are rounded to one significant digit, so the size of the change is not knowable from them.
Daily record
Every field we record, one column per observation. Fields that never moved are named once rather than repeated across every column. A row of identical numbers would be padding.
| Field | 18 Oct | 19 Oct | 20 Oct | 21 Oct | 22 Oct | 23 Oct | 24 Oct | 25 Oct | 26 Oct | 27 Oct | 28 Oct | 29 Oct | 30 Oct | 31 Oct |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Downloads that day | — | 687 | 937 | 1,302 | 1,324 | 1,922 | 1,424 | 800 | 939 | 1,249 | 1,125 | 863 | 1,479 | 965 |
| Ratings total | 557 | 557 | 557 | 557 | 557 | 557 | 558 | 558 | 558 | 558 | 558 | 558 | 558 | 559 |
| Version | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.76 | 6.81 |
| Threads resolved | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 2 | 2 | 2 | 2 | 2 | 2 |
Unchanged throughout: active installs (100,000+) · support threads (2)
91 days of observation, most recent 14 shown.
Maintenance
When it was last released, and how far its declared compatibility has drifted from current WordPress.
Added to directory8.5 years ago 30 Jan 2018
Requires WP4.0
Requires PHP7.0
Version lagcurrent
Is anyone still maintaining this?
- Last released 30 Oct 2026, 9 days ago.
- Declares compatibility with WordPress 7.1.4, which is current.
- 2 of 2 support threads answered in the last two months.
- malcare publishes no other plugin in the directory, so there is no wider activity to compare against.
A plugin that does one thing correctly may need no changes for years; a long gap is not, by itself, evidence of neglect.
History
Everything dated that this registry holds about the plugin, most recent first. Releases carry the author’s own release date; everything else is dated to when it was observed.
Entries marked from the release log predate this registry, and daily observation began 02 Aug 2026. They were read from the plugin’s public SVN history after the fact, not watched as they happened. Everything else was observed directly.
- 30 Oct 20269 days agoVersion 6.81 released
- 17 Sep 20262 months agoVersion 6.76 released
- 28 Aug 20262 months agoVersion 6.72 released
- 25 Aug 20262 months agoVersion 6.69 released
- 15 Aug 20263 months agoVersion 6.65 released
- 02 Aug 20263 months agoInstall band moved to 200,000+Bands are rounded to one significant digit, so the size of the change is not knowable.
- 02 Aug 20263 months agoFirst observed by PluginsPediaDaily snapshots of this plugin’s directory record begin here. Everything above this line is observed; anything before it comes from fields the API itself reports.
- 30 Jul 20263 months agoVersion 6.62 released
- 06 Jun 20265 months agoVersion 6.48 releasedfrom the release logCommitted by ritesh.soni36.
- 03 Jun 20265 months agoVersion 6.47 releasedfrom the release logCommitted by ritesh.soni36.
- 20 Apr 20267 months agoVersion 6.39 releasedfrom the release logCommitted by ritesh.soni36.
- 20 Apr 20267 months agoVersion 6.44 releasedfrom the release logCommitted by ritesh.soni36.
- 29 Jan 20269 months agoVersion 6.36 releasedfrom the release logCommitted by ritesh.soni36.
- 01 Dec 202511 months agoVersion 6.02 releasedfrom the release logCommitted by ritesh.soni36.
- 14 Apr 202519 months agoVersion 5.92 releasedfrom the release logCommitted by ritesh.soni36.
- 14 Apr 202519 months agoVersion 5.93 releasedfrom the release logCommitted by ritesh.soni36.
- 10 Jan 202522 months agoVersion 5.91 releasedfrom the release logCommitted by ritesh.soni36.
- 16 Dec 202423 months agoVersion 5.88 releasedfrom the release logCommitted by ritesh.soni36.
- 02 Dec 202423 months agoVersion 5.81 releasedfrom the release logCommitted by ritesh.soni36.
- 02 Dec 202423 months agoVersion 5.85 releasedfrom the release logCommitted by ritesh.soni36.
- 05 Jul 20197 years ago71 earlier releasesfrom the release logBetween 05 Jul 2019 and 26 Sep 2024. Listed individually in the public release log rather than here.
- 30 Jan 20188.5 years agoAdded to the WordPress.org directoryReported by the plugin API as the date this plugin was added.
Media coverage
Writing about this plugin elsewhere, collected by this registry. The links go to the sources; what they claim is theirs.
- 30 Sep 2026 · Vulnerability & Patch Roundup — September 2026Sucuri Blog
- 07 Sep 2026 · Security Update: Improved Parameter Validation ChecksMalCare
- 03 Sep 2026 · CVE-2026-84776 - MalCare Security <= 6.69 Unauthenticated Denial of ServiceOpenCVE
- 03 Sep 2026 · WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability (CVE-2026-84776)HOL Guard
- 02 Sep 2026 · MalCare Security - Denial of Service Attack vulnerability (CVE-2026-84776)Patchstack
- 26 Aug 2026 · Security Update: Plugin Connection Protocol ImprovedBlogVault
- 26 Aug 2026 · BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery (CVE-2026-19718)HOL Guard
- 26 Aug 2026 · CVE-2026-19718: WordPress Plugin Authentication Bypass FlawSentinelOne
- 24 Aug 2026 · BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key RecoveryWPScan
- 10 Jul 2023 · MalCare, Blogvault, and WPRemote Plugins Patch Vulnerabilities Allowing Site Takeover Through Stolen API CredentialsWP Tavern
- 06 Jul 2023 · Possible site takeover through stolen API credentials in combination with SQLi (MalCare ≤5.0.9)Snicco
What we know, and what we don’t
Everything on this page in one place, including the gaps, so that nothing here is mistaken for a clean bill of health.
What we know
- It has been held by malcare for all 91 days we have observed it.
- It was last released 9 days ago (30 Oct 2026).
- Its author declares it tested up to WordPress 7.1.4, which is current.
- WordPress.org reports 100,000+ active installs.
- It carries 559 ratings, averaging 4.4 out of 5.
- 2 of 2 support threads in the last two months are marked resolved.
Every record on this site, this one included, works under the same limits. We read what WordPress.org publishes about a plugin, never the plugin’s own code, so nothing here says whether a plugin is well built or safe. Install counts reach us already rounded; a change smaller than a band step doesn’t show. We don’t track security advisories yet. For anything older than our first observation we rely on the plugin’s public release log, where one exists. What this registry can and cannot see
Similar plugins
Plugins that share this one’s tags and talk about the same things in their own descriptions. Distinctive tags count for far more than broad ones. Sharing hover means something, sharing woocommerce does not, and a plugin that never mentions the subject matter is left out however its author tagged it. Among close matches, more widely installed plugins are listed first. This is a grouping rather than a ranking of quality.
Quttera ThreatSign – Web Malware Scanner for WordPress
WordPress multi-level security scanner detecting malware, 0-day threats, brute-force attacks, bot attacks, and unauthorized admin changes.
10,000+ installs3.9★ (47)updated 29 Oct 2026
far fewer installs
Defender Security – Malware Scanner, Login Security & Firewall
WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.
80,000+ installs4.8★ (334)updated 29 Sep 2026
Security Optimizer – The All-In-One Protection Plugin
Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.
1,000,000+ installs4.5★ (157)updated 14 Oct 2026
10× the installs
Patchstack – WordPress & Plugins Security
Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.
100,000+ installs4.9★ (61)updated 28 Jul 2026
Site Lockdown Security
Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost.
700+ installs5.0★ (5)updated 20 Jul 2026
far fewer installs
DevDome Malware Scanner – WordPress Malware Removal & Security Scanner
WordPress malware scanner and virus scanner for hacked sites. Find malware, backdoors and malicious code, then remove it with quarantine and repair.
300+ installs5.0★ (2)updated 27 Oct 2026
far fewer installs
Grouped from the tags each author chose for their own plugin, so the grouping is only as good as those tags.
Reach out about this record
Corrections, missing context, or anything else about MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall: a person reads every submission, and corrections get a reply within 5 business days.