Type to search.

#308 by installs

Anti-Malware Security and Brute-Force Firewall

by EliVersion 4.23.92

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

Active installs
100,000+
#308 of 1,000
Downloads, all time
8.1M
8,063,068
Downloads, 30 days
144.4K
130.5K in the last 7
Rating
4.9 / 5
783 reviews
Last updated
4 days ago
Oct 27, 2026
Version
4.23.92
64 releases

Upkeep and compatibility

Last updatedOctober 27, 2026Updated in the last 3 months
Tested up toWordPress 7.1.4Covers WordPress 7.1.4, the current release
Needs WordPress3.3 or newer
Needs PHP5.6 or newer
First publishedMarch 27, 2012
Support, last two months1 of 1 threads resolved (100%)

Reviews

4.9 / 5 from 783 reviews

Reviews by star rating
5 stars758
4 stars19
3 stars0
2 stars1
1 star5

Downloads, last 30 days

Low 347 a dayHigh 44.5K a day

What the author says it does

Features:

  • Download Definition Updates to protect against new threats.
  • Run a Complete Scan to automatically remove known security threats, backdoor scripts, and database injections.
  • Firewall block SoakSoak and other malware from exploiting Revolution Slider and other plugins with known vulnerabilites.
  • Upgrade vulnerable versions of timthumb scripts.

Premium Features:

  • Patch your wp-login and XMLRPC to block Brute-Force and DDoS attacks.
  • Check the integrity of your WordPress Core files.
  • Automatically download new Definition Updates when running a Complete Scan.

Register this plugin at GOTMLS.NET and get access to new definitions of “Known Threats” and added features like Automatic Removal, plus patches for specific security vulnerabilities like old versions of timthumb. Updated definition files can be downloaded automatically within the admin once your Key is registered. Otherwise, this plugin just scans for “Potential Threats” and leaves it up to you to identify and remove the malicious ones.

The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.

Questions the author answers

Why should I register?

If you register on GOTMLS.NET you will have access to download definitions of New Threats and added features like automatic removal of “Known Threats” and patches for specific security issues like old versions of timthumb and brute-force attacks on wp-login.php.

How do I patch the Revolution Slider vulnerability?

Easy, if you have installed and activated my this Anti-Malware plugin on your site then it will automatically block attempts to exploit the Revolution Slider vulnerability.

How do I patch the wp-login vulnerability?

The WordPress Login page is susceptible to a brute-force attack (just like any other login page). These types of attacks are becoming more prevalent these days and can sometimes cause your server to become slow or unresponsive, even if the attacks do not succeed in gaining access to your site. This plugin can apply a patch that will block access to the WordPress Login page whenever this type of attack is detected.

Why can’t I automatically remove the “Potential Threats” in yellow?

Many of these files may use eval and other powerful PHP function for perfectly legitimate reasons and removing that code from the files would likely cripple or even break your site so I have only enabled the Auto remove feature for “Know Threats”.

How do I know if any of the “Potential Threats” are dangerous?

Click on the linked filename to examine it, then click each numbered link above the file content box to highlight the suspicious code. If you cannot tell whether or not the code is malicious just leave it alone or ask someone else to look at it for you.

What if the scan gets stuck part way through?

First just leave it for a while. If there are a lot of files on your server it could take quite a while and could sometimes appear to not be moving along at all even if it really is working. If it still seems stuck after a while then try running the scan again, be sure you try both the Complete Scan and the Quick scan.

Latest changelog entry

4.23.92

  • Fixed path condition in save_contents function that prevented Brute-Force patch from installing (thank to Sean Dempsey for finding this error).

Screenshots

First 4 of 5, from WordPress.org.

Tagged

Plugins that share its tags

#401 by installs

Hide My WP Ghost – Security & Firewall

by John Darrel

Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA

Installs
100,000+
Rating
4.5 (373)
Updated
1 day ago

#57 by installs

All-In-One Security (AIOS) – Security and Firewall

by David Anderson / Team Updraft

Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more.

Installs
1+ million
Rating
4.7 (1.7K)
Updated
1 day ago

Where this page's numbers come from

Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin. The author takes donations at their donate page.