by Nexura Security 3 (2 reviews)

Nexura Security — Malware Scanner, Firewall, 2FA & WordPress Security

Name: Nexura Security — Malware Scanner, Firewall, 2FA & WordPress Security
Rating: 3.0 (2 reviews)
Author: Nexura Security

Free WordPress security plugin with malware scanner, firewall, 2FA & brute force protection. Lightweight alternative to Wordfence & Sucuri.

Nexura Security ranks #26,500 among WordPress.org plugins with 20+ active installations, is #1,582 of 5,058 in the Security category, a 3/5 rating from 2 reviews, and was last updated Oct 26, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v1.0.23 Current Version v1.0.23

Updated 1 week ago Last Update on 26 Oct, 2026

Refreshed 1 week ago Last Refreshed on

#1,582 of 5,058 in Security Top 50% by installs Downloads -37.9% this week Actively maintained

View on WordPress.org

Rank

#26,500

— No change

Active Installs

20+

+11.1%

KW Avg Position

12 better

Downloads

1.8K

+9 today

Support Resolved

— No change

Rating

60%

Review 3 out of 5

3 (2 reviews)

Next Milestone 30

Total Progress 80%

20+ 30+

3,755

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 2 more installs to reach 30+

Rank Changes

Current #26,500

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

3.0

2 reviews

Overall 60%

1 (50%)

0 (0%)

1 (50%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.0.23
Last Updated: Oct 26, 2026
Requires WP: 5.8+
Tested Up To: 7.1.4
PHP Version: 7.4 or higher
Author: Nexura Security

Support & Rating

Rating: ★ ★ ★ ☆ ☆ 3
Reviews: 2
Support Threads: 0
Resolved: 0%

Keywords

firewall malware removal malware scanner security two factor authentication

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

Frequently Asked Questions

Common questions about Nexura Security — Malware Scanner, Firewall, 2FA & WordPress Security

Yes, 100% free. All core security features — malware scanning, file integrity monitoring, 2FA, brute-force protection, WAF, hardening, database scanning, and the revolutionary Reinfection Guard — are completely free with no usage limits. The Pro version adds advanced automation (like scheduled scans, AI-assisted code fixing, and AST tokenizer analysis) for enterprise sites.

This is one of the biggest frustrations for WordPress site owners. When you delete an infected file, malware often returns within hours or days because hackers plant stealth persistence mechanisms across your site: * Hidden Must-Use (MU) Plugins that execute before normal plugins load. * Rogue Drop-ins (like fake advanced-cache.php or db.php) that hijack requests. * Malicious WP-Cron Scheduled Tasks that silently download fresh malware payloads in the background. * Executable PHP scripts hidden inside deep subdirectories of /wp-content/uploads/. * Database Options Injections in wp_options containing base64-encoded reinfection scripts. * Modified server configs (.htaccess, .user.ini, or wp-config.php). Nexura Security's Reinfection Guard is specifically engineered to analyze and uncover all these persistence vectors so you can eradicate malware at its root.

Install & Activate: Install Nexura Security from your WordPress dashboard or upload the zip file. Run a Deep Malware Scan: Go to Nexura Security → Malware Scanner and click "Start Scan". Nexura will check all core files, plugins, themes, and uploads. One-Click Cleanup: Review detected threats and click "Clean" to remove malicious backdoors and web shells. Run Reinfection Guard: Navigate to Reinfection Guard to audit crons, drop-ins, and persistence vectors to ensure malware cannot regenerate. Lock Down with 2FA & Hardening: Enable Two-Factor Authentication (2FA) and One-Click Security Hardening to block future brute-force and exploit attempts.

If you see the red Google Chrome warning "The site ahead contains harmful programs", "Deceptive site ahead", or "The site ahead contains malware", your website has been compromised with malware or phishing scripts and blacklisted by Google Safe Browsing. To fix this issue: 1. Scan your site: Run a Nexura Security deep malware scan to find hidden backdoors, malicious redirects, and infected files. 2. Clean the malware: Remove all detected threats using our one-click cleanup tool. 3. Check Reinfection Guard: Neutralize any scheduled crons or persistence scripts that might reinstall the malware. 4. Request a Review: Go to Google Search Console, navigate to "Security Issues", and submit a review request. The warning is usually lifted within 24-72 hours. Nexura's built-in Google Safe Browsing Check lets you monitor your blacklist status directly from your WordPress dashboard.

If you see "This site may be hacked" next to your domain in Google Search results, Google has detected SEO spam (like the Japanese keyword hack or Pharma hack) on your site. Nexura Security's deep scanner can find and remove these hidden spam injections so you can request a review and restore your SEO rankings.

Yes. Nexura Security includes real-time vulnerability checks for PHP versions and its Pre-Boot WAF blocks CGI argument injection and remote code execution payloads (including CVE-2024-4577 and TellYouThePass/Kinsing botnet exploit signatures) before requests reach WordPress core.

No. In version 1.0.23, Nexura Security features an intelligent context-aware safe vendor filter for popular frameworks and packages (including Freemius SDK, Composer, Elementor, and WooCommerce). It scans and protects files without generating false alarms on standard development packages.

Yes. The built-in malware scanner detects backdoors, obfuscated code, web shells, and known malware patterns. You can remove detected threats with a single click. For fully automated, zero-touch cleanup and AST tokenization, upgrade to Nexura Security Pro.

No. Nexura Security uses a micro-batching architecture that runs all scans in small, non-blocking chunks in the background. It utilizes lightweight background scanning, even during a full site scan of 50,000+ files.

Nexura Security offers comparable malware scanning, firewall, 2FA, and brute-force protection — but with a significantly lighter performance footprint. Unlike Wordfence, Nexura Security does not insert blocking rows into your database during normal operation, and its WAF uses auto_prepend_file to intercept threats at the PHP level before WordPress even loads.