Build a WebsiteGetting hacked is a very frustrating experience for website administrators. If your WordPress site gets hacked, what should you do? Don't panic. Try these 4 malware scanning plugins recommended by WordPressWordPress Pluginto see which files have been modified, then replace them with clean files.
Quttera Web Malware Scanner
The Quttera Web Malware Scanner plugin will scan your website for malware, trojans, backdoors, worms, viruses, shells, spyware, and other threats, as well as JavaScript code obfuscation, exploits, malicious iframes, malicious code injection, malicious code obfuscation, auto-generated malicious content, redirects, hidden eval code, etc. Additionally, it checks if your site is blacklisted by Google and other blacklist authorities. Use the free Quttera Web Malware Scanner plugin to help protect your website, its users, and your online reputation.
Features:
One-click scan
Unknown malware detection
External link detection
Blacklist status
No signature or pattern updates
AI scanning engine
Cloud technology
Detailed investigation report
Investigate WordPress files
Detect files infected with PHP malware
Detect injected PHP shell
Quttera Web Malware Scanner scanning modes are divided into external scanning and internal scanning. External scanning performs an overall scan of your website through Quttera's official scanning interface, such as detecting whether Google has flagged your site as dangerous, which requires external scanning.
Internal scanning mainly scans your local php/js/css files for malware.
NaibaAfter testing, this plugin may cause false positives for similar security plugins, so it's best to install only one plugin at a time for scanning.
Plugin installation address:https://wordpress.org/plugins/quttera-web-malware-scanner/
Anti-Malware Security and Brute-Force Firewall
Features:
Run a full scan to automatically remove known security threats, backdoor scripts, and database injections.
Firewall blocks SoakSoak and other malware from exploiting Revolution Slider and other plugins with known vulnerabilities.
Upgrade vulnerable versions of timthumb scripts.
Download definition updates to protect against new threats.
Advanced features:
Harden your wp-login and XMLRPC to block Brute-Force and DDoS attacks.
Check the integrity of WordPress core files.
Automatically download new definition updates when running a full scan.
Anti-Malware Security and Brute-Force Firewall can quickly scan WP core files, themes, or plugins separately, or all together. It comes with a simple firewall.
Extension Download Address:https://wordpress.org/plugins/gotmls/
Wordfence Security – Firewall & Malware Scan
Description
The most popular WORDPRESS firewall and security scanner
Wordfence includes an endpoint firewall and malware scanner built from the ground up to protect WordPress. Our Threat Defense Feed gives Wordfence the latest firewall rules, malware signatures, and malicious IP addresses to keep your site secure. Wordfence, composed of 2FA and a range of additional features, is the most comprehensive WordPress security solution.
WORDPRESS FIREWALL
The web application firewall identifies and blocks malicious traffic. Built and maintained by a large team 100% focused on WordPress security.
[Premium] Real-time firewall rules and malware signature updates via Threat Defense Feed (free version delayed by 30 days).
[Premium] Real-time IP blacklist blocks all requests from the most malicious IPs, protecting your site while reducing load.
Protect your site at the endpoint with deep integration with WordPress. Unlike cloud alternatives, it does not break encryption, cannot be bypassed, and cannot leak data.
Integrated malware scanner blocks requests containing malicious code or content.
Prevent brute force attacks by limiting login attempts.
WORDPRESS SECURITY SCANNER
The malware scanner checks core files, themes, and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects, and code injections.
[Premium] Real-time malware signature updates via Threat Defense Feed (free version delayed by 30 days).
Compare your core files, themes, and plugins with those in the WordPress.org repository, check their integrity, and report any changes to you.
Fix changed files by overwriting them with the original versions. Remove any files that cannot be easily attributed in the Wordfence interface.
Check your site for known security vulnerabilities and alert you to any issues. Also alert you to potential security problems when a plugin is closed or abandoned.
Check your content security by scanning file content, posts, and comments for dangerous URLs and suspicious content.
[Premium] Check if your website or IP is blacklisted for malicious activity, generating spam, or other security issues.
Login Security
Two-Factor Authentication (2FA) is one of the most secure forms of remote system authentication, provided through any TOTP-based authenticator app or service.
Login page CAPTCHA blocks bot logins.
Disable or add 2FA to XML-RPC.
Block admin logins using known compromised passwords.
WORDFENCE CENTRAL
Wordfence Central is a powerful and efficient way to manage the security of multiple sites from one place.
Effectively assess the security status of all your websites in one view. View detailed security findings without leaving Wordfence Central.
Powerful templates make configuring Wordfence a breeze.
Use unlimited sites for free.
Security Tools
Use Live Traffic to monitor visits and hacking attempts in real time that are not shown in other analytics packages; includes source, their IP address, time of day, and time spent on your site.
Block attackers by IP or build advanced rules based on IP ranges, hostnames, user agents, and referrers.
Block countries/regions with Wordfence Premium.
This plugin was previously introduced by Naiba.Install a firewall for WordPress! Try Wordfence
Extension Download Address:https://wordpress.org/plugins/wordfence/
Sucuri Security – Auditing, Malware Scanner and Security Hardening
Sucuri Inc. is a globally recognized authority on all matters related to website security, with a focus on WordPress security.
The Sucuri Security WordPress plugin is free for all WordPress users. It is a security suite designed to complement your existing security posture. It provides users with a range of security features for their website, each designed to positively impact their security posture:
Security Activity Auditing
File Integrity Monitoring
Remote Malware Scanning
Blacklist Monitoring
Effective Security Hardening
Post-Hack Security Actions
Security Notifications
Website Firewall (Premium)
To use Sucuri Security, you first need to apply for a free API. The firewall is a paid feature and does not directly display the scanning process. When you open the plugin's homepage, it will scan in the background quickly and then provide diagnostic information on the front end.
Extension Download Address:https://wordpress.org/plugins/sucuri-scanner/
Build a WebsiteDuring the process, website data is the most important thing, so regular backups are necessary.Automatically backup WordPress websites using pluginsWhen your website is infected with malware, you can also directly restore it using previously backed-up data to reduce losses caused by the infection.