by WPMU DEV - Your All-in-One WordPress Platform 4.8 (334 reviews)

Defender Security – Malware Scanner, Login Security & Firewall

Name: Defender Security – Malware Scanner, Login Security & Firewall
Rating: 4.8 (334 reviews)
Author: WPMU DEV - Your All-in-One WordPress Platform

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

Defender Security ranks #521 among WordPress.org plugins with 80,000+ active installations, is #83 of 5,058 in the Security category, a 4.8/5 rating from 334 reviews, and was last updated Sep 29, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v6.3.0 Current Version v6.3.0

Updated 1 month ago Last Update on 29 Sep, 2026

Refreshed 18 hours ago Last Refreshed on

#83 of 5,058 in Security Top 1% by installs Downloads -33.4% this week

View on WordPress.org

Rank

#521

— No change

Active Installs

80K+

-7.2%

KW Avg Position

8.8

— No change

Downloads

4.4M

+101 today

Support Resolved

100%

— No change

Rating

96%

Review 4.8 out of 5

4.8 (334 reviews)

Next Milestone 90K

Total Progress 54.9%

80K+ 90K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 4,510 more installs to reach 90K+

Rank Changes

Current #521

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.8

334 reviews

Overall 96%

305 (91%)

11 (3%)

5 (1%)

8 (2%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

100%

Resolution Rate

Security History

Source: WPVulnerability

11 known vulnerabilities on record · 0 in the last 24 months · checked 1 week ago

Jun 28, 2024

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 6.2.0

CVE-2026-19225 · Fixed in v6.2.0
Jun 28, 2024

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 4.7.3

CVE-2024-37444 · Fixed in v4.7.3
Feb 12, 2024

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 4.4.2

CVE-2024-25595 · Fixed in v4.4.2
Dec 27, 2023

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 4.2.0

CVE-2023-51490 · Fixed in v4.2.0
Nov 3, 2023

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 4.2.1

CVE-2023-47189 · Fixed in v4.2.1
Sep 6, 2023

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 4.1.0

CVE-2023-5089 · Fixed in v4.1.0
Jun 7, 2023

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 2.4.6.1

CVE-2021-4342 · Fixed in v2.4.6.1
Nov 23, 2022

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 3.3.3

CVE-2022-44581 · Fixed in v3.3.3
Mar 1, 2021

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 2.4.6.1

Fixed in v2.4.6.1
Mar 1, 2021

Defender Security – Malware Scanner, Login Security & Firewall [defender-security] < 2.4.6.1

CVE-2021-4425 · Fixed in v2.4.6.1

Showing the 10 most recent of 11 records.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 6.3.0
Last Updated: Sep 29, 2026
Requires WP: 6.4+
Tested Up To: 7.1.4
PHP Version: 8.0.0 or higher
Author: WPMU DEV - Your All-in-One WordPress Platform

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.8
Reviews: 334
Support Threads: 4
Resolved: 100%

Keywords

firewall login security malware malware scanner security

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

WordPress site owners and administrators who need to secure their sites without deep security expertise. It addresses malware infections, brute force attacks, and unauthorized access by combining malware scanning, firewall protection, login security, and hardening in one plugin.

On-demand malware scans
AntiBot Global Firewall
Geo IP blocking
User agent banning
Hide login URL
Two-factor authentication (2FA)
One-click security hardening
Automated audit logs

Frequently Asked Questions

Common questions about Defender Security – Malware Scanner, Login Security & Firewall

Defender is built to add all the best hardening and website security recommendations used by the pros without having to become a security expert. This means you get all the most effective and proven protection methods other services provide with fewer settings, one-click hardening and faster setup.

Hackers and bot attacks are not the only security threats to your site. No matter what security plugin or service you use, always be prepared with a secure backup stored in a safe location away from your live site. Security does not protect from hosting outages, server errors and accidentally lost or damaged data. We recommend Snapshot. Defender with scheduled managed backups is the best way to keep your site safe.

Yes! Defender's Firewall gives you robust site protection and security by allowing you to block bad bot IPs and use geographical IP blocking

You can. Just make sure not to enable the same security features in the third-party plugin that you also have enabled in Defender, as this might cause conflicts, such as malware scanners, firewall, and login security features.

Yes! All of Defender's security features are fully compatible with a multisite installation. It can be network enabled and managed from the network admin.

Yes, Defender provides multiple layers of spam protection and security. A large percentage of Trackbacks and Pingbacks are spam, and Defender allows you to easily disable both to reduce spam and improve site security. Additionally, Defender includes the AntiBot Global Firewall, which blocks known malicious IPs and bots before they even reach your site, offering proactive protection against common attacks and spam bots.

Yes. Defender's IP banning, IP lockout, and 404 detection security features can identify DDoS attacks and block bad IPs.

If you’re the administrator and you’ve been locked out due to multiple failed login attempts, Defender offers two options: Option #1: Use the “Unlock Me” feature: Click the Unlock Me button on the login page and enter your username or the email address linked to your site. You’ll receive an email with a secure link to unlock your account and regain access — no technical steps needed. Option #2: Use the manual method (if email doesn’t work): Add the following code to your theme’s functions.php file, located in the main directory of your active theme. add_filter( 'ip_lockout_default_whitelist_ip', function ( $ips ) { $ip = 'YOUR IP HERE'; $ips[] = $ip; return $ips; } ); Replace "YOUR IP HERE" with your actual IP address (you can use a tool like whatsmyip to find it.)

WPMU DEV's expert support can advise you on how to clean up your site if it's been hacked. Create a new thread in our support forum, or Defender Pro gives you access to 24/7 live support.

We take plugin security incredibly seriously; if you have a bug or vulnerability to report, you can do so through the Patchstack Vulnerability Disclosure Program. It's fast, easy, and you will be notified when the issue is fixed. Report a vulnerability.