Read-only security scanner: checks core and plugins against the official checksums and finds hidden code, risky settings and new admins.
Alternatives to Exploit Scanner
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Scan your WordPress database for hidden SEO spam, pharma hacks, malicious scripts, iframes and spam links in posts and blocks.
The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
Alerts when a plugin changes owner or is abandoned, holds its next update, verifies every file and finds the Japanese keyword hack.
Detect suspicious WordPress users using configurable risk signals and scoring.
Scan your WordPress database for malware and spam. Clean infected rows, review spam separately, and delete only what you choose.
Scan your WordPress files for malicious code. Pick the folders, start a scan, and review suspicious files right inside wp-admin.
Scans WordPress files and database for malware indicators with practical cleanup workflows and backups.
Totally free malware scanner with no paid features: find infected files, backdoors, hacked core files, rogue admins and outdated software.
Audit WordPress plugins and themes for web shells, Tiny File Manager injections, modified files, and official repository checksum mismatches.