by
applidata56
0 (0 reviews)
CoreSeal
Checks WordPress core files against official checksums, scans themes and plugins for malware, and repairs or quarantines suspicious files.
CoreSeal ranks #73,050 among WordPress.org plugins with 0+ active installations, is #3,855 of 5,058 in the Security category, and was last updated Oct 26, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.1.0
Current Version v1.1.0
Updated 6 days ago
Last Update on 26 Oct, 2026
Refreshed 2 days ago
Last Refreshed on
#3,855 of 5,058 in Security
Actively maintained
Rank
#73,050
—
No change
Active Installs
0+
—
No change
KW Avg Position
76
0.5 worse
Downloads
71
+4 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 10
0+
10+
45,482
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 10 more installs to reach 10+
Rank Changes
Current
#73,050
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.1.0
- Last Updated
- Oct 26, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.1.4
- PHP Version
- 7.4 or higher
- Author
- applidata56
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about CoreSeal
Probably not, if those files are readme.html, wp-config-sample.php and wp-includes/version.php. They are translated in localized WordPress packages. CoreSeal uses the checksums of your package language when WordPress.org publishes them; when it does not, these three files differ from the English reference. Open "View changes" to check that only translated text differs.
The official copy downloaded for comparison is the English one, so it does not match the checksum of your translated package. CoreSeal never writes a file that does not match the official checksum. Reinstall WordPress from Dashboard > Updates to repair these files.
Not necessarily. Some hosts and services add their own files (verification files, cache tools…). Open "View file" to check its content. If you are not sure, quarantine it: it is removed from your site but kept in the vault, and you can put it back at any time.
In a folder with a random name inside the uploads folder. Files are renamed with a random name and a .vault extension so the server never runs them, and the folder is closed to visitors on Apache and IIS. Deleting CoreSeal from the Plugins screen deletes this folder too.
No. CoreSeal only writes files when WordPress can write them directly, and it never asks for FTP credentials. In that case, restore core files by reinstalling WordPress from Dashboard > Updates.
Some signatures look for functions that malware uses but that legitimate code can use too (for example shell_exec). Open "View file": the matching lines are highlighted and the reason is explained. If you trust the file, click "Ignore". It will be reported again only if the file changes.
A few seconds to a few minutes, depending on the number of files and the speed of your hosting. Keep the CoreSeal page open during the scan; if it is interrupted, it resumes where it stopped.
No. It is designed to work alongside a firewall or login protection plugin. Those try to stop attacks; CoreSeal checks whether files were changed anyway.
