by
DevDome
5 (2 reviews)
DevDome Malware Scanner – WordPress Malware Removal & Security Scanner
WordPress malware scanner and virus scanner for hacked sites. Find malware, backdoors and malicious code, then remove it with quarantine and repair.
DevDome Malware Scanner ranks #10,780 among WordPress.org plugins with 300+ active installations, is #648 of 5,058 in the Security category, a 5/5 rating from 2 reviews, and was last updated Oct 28, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.3.18
Current Version v1.3.18
Updated 4 days ago
Last Update on 28 Oct, 2026
Refreshed 2 days ago
Last Refreshed on
#648 of 5,058 in Security
Top 25% by installs
Actively maintained
Rank
#10,780
—
No change
Active Installs
300+
+70.5%
KW Avg Position
15.4
0.2 worse
Downloads
7K
+222 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(2 reviews)
Next Milestone 400
300+
400+
959
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 65 more installs to reach 400+
Rank Changes
Current
#10,780
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
2 reviews
Overall
100%
5
2
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Security History
Source: WPVulnerabilityNo known vulnerabilities on record for DevDome Malware Scanner. Checked 1 month ago.
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.3.18
- Last Updated
- Oct 28, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.1.4
- PHP Version
- 7.4 or higher
- Author
- DevDome
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 2
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about DevDome Malware Scanner – WordPress Malware Removal & Security Scanner
Quarantine removes the file from disk and keeps a non-executable copy in the plugin's database table, compressed when compression is available. You can restore it from the Quarantine tab at any time. Permanent deletion requires the explicit Delete permanently button on a quarantined file. Uninstalling removes the plugin's tables, settings and scheduled tasks, including the quarantine table. Restore or delete quarantined files first if you still need them.
No. Every scanning engine runs on your own server: core, plugin and theme integrity, code analysis, uploads, configuration files, users, cron, database and persistence. Connecting a free account adds the 90,000+ known-malware signatures, the security dashboard and the alert email. Without an account, the signature set is never downloaded, so there is no known-malware signature matching. The scanner relies on its heuristics and reports that in the coverage notes. If you connect and later disconnect, byte-pattern signatures already on the site keep matching, but updates and the file hash check stop.
Cleanup has safeguards to reduce that risk. Files WordPress cannot boot without are never quarantined. A repair reinstalls the whole package, either all of WordPress core or the whole plugin, through the WordPress updater and verifies it against official checksums afterwards. The flagged file and every other file the reinstall would change are copied to quarantine first. If the reinstall fails, repair attempts to put the originals back and reports any remaining recovery work. Theme files, database content, user accounts, cron tasks and configuration files are never changed automatically, with one exception: a theme file matching a known-malware signature is quarantined. Anything quarantined can be restored with one click from the Quarantine tab.
Unscanned areas cannot be called clean. The Overview lists excluded paths, files above the deep scan size limit, unreachable checksum sources, files the previous scan could not finish and stages that failed. Findings on files that could not be rechecked stay open instead of being resolved.
Scans run in short batches while the admin page is open and continue through WP-Cron when it is closed. The default is 8 seconds per request, adjustable from 3 to 25 in Settings. You can pause or cancel at any time. Scanning uses PHP time on your server. Lower the batch budget on very constrained shared hosting.
Severity is potential impact: Critical, High, Medium, Low or Info. Confidence is how likely the finding is malicious. A known-signature match has 100% confidence. A high-entropy blob alone is only a contributing signal and is never called malware by itself. Low and Info rows are notes, not threats, and never trigger an alert.
Run a scan and review its evidence and coverage gaps. The plugin checks for changed files, suspicious PHP, database injections and unexpected administrators or scheduled tasks. A changed file or new administrator alone does not prove the site was hacked. Review eligible cleanup actions, then scan again. The Reinfection risks tab helps you investigate access or files that may remain after cleanup.
Open Malware Scanner in the admin menu and press Scan Now. The virus scanner checks WordPress files and database content using integrity checks and code analysis, with known-malware matching available through the optional account. For virus removal from eligible site files, review the proposed quarantine or official repair action. This scans your WordPress installation; it does not provide continuous protection for your computer or automatically clean every finding.
Its database checks look for injected scripts, hidden iframes, spam and hidden links in options, posts, revisions, post metadata and user metadata. These checks can help investigate a pharma hack, Japanese keyword hack or other SEO spam where the infection leaves those patterns. Suspicious database content needs your review. The plugin does not automatically rewrite affected posts or remove search engine listings.
The scanner checks PHP, database content, wp-config.php, .htaccess and .user.ini for suspicious code or settings that may be involved in a redirect hack. Review the evidence to investigate malicious redirects. Configuration and database findings require a decision. These checks do not guarantee detection of every redirect mechanism.
