by CleanTalk Inc 4.8 (397 reviews)

Security Plugin, Firewall & Malware Scanner with Auto Removal

Name: Security Plugin, Firewall & Malware Scanner with Auto Removal
Rating: 4.8 (397 reviews)
Author: CleanTalk Inc

Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.

Security Plugin, Firewall & Malware Scanner with Auto Remov… ranks #883 among WordPress.org plugins with 40,000+ active installations, is #40 of 1,659 in the Authentication category, a 4.8/5 rating from 397 reviews, and was last updated Oct 27, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v2.191 Current Version v2.191

Updated 5 days ago Last Update on 27 Oct, 2026

Refreshed 2 days ago Last Refreshed on

#40 of 1,659 in Authentication Top 1% by installs Downloads +394.2% this week Actively maintained

View on WordPress.org

Rank

#883

— No change

Active Installs

40K+

-7.5%

KW Avg Position

0.2 better

Downloads

2.6M

+197 today

Support Resolved

80%

— No change

Rating

96%

Review 4.8 out of 5

4.8 (397 reviews)

Next Milestone 50K

Total Progress 33.1%

40K+ 50K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 6,690 more installs to reach 50K+

Rank Changes

Current #883

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.8

397 reviews

Overall 96%

366 (92%)

6 (2%)

3 (1%)

19 (5%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

80%

Resolution Rate

Security History

Source: WPVulnerability

10 known vulnerabilities on record · 5 in the last 24 months · checked 1 week ago

Oct 6, 2026 UNPATCHED

Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] <= 2.189 (unfixed)

CVE-2026-39768 · No fix released
Aug 20, 2026

Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.185

CVE-2026-66593 · Fixed in v2.185
Dec 8, 2025

Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.169

CVE-2025-13604 · Fixed in v2.169
Feb 11, 2025

Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.150

CVE-2024-13365 · Fixed in v2.150
Nov 25, 2024

Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.145.1

CVE-2024-10570 · Fixed in v2.145.1
Nov 6, 2023

Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.121

CVE-2023-5239 · Fixed in v2.121
Feb 18, 2022

Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.80.1

Fixed in v2.80.1
Jul 6, 2020

Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.51

CVE-2020-36698 · Fixed in v2.51
Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.51

Fixed in v2.51
Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall] < 2.51

Fixed in v2.51

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 2.191
Last Updated: Oct 27, 2026
Requires WP: 5.0+
Tested Up To: 7.1
PHP Version: 7.2 or higher
Author: CleanTalk Inc

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.8
Reviews: 397
Support Threads: 41
Resolved: 80%

Keywords

2FA firewall login malware security

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,015

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

All-In-One Security (AIOS) – Security and Firewall

MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites

700K+ installs

#86

View all Authentication plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want protection against hacking, malware, and brute-force login attacks. It solves the problem of unauthorized access and malicious code infection by combining login security, a firewall, and a malware scanner into one plugin.

Limit Login Attempts
Two Factor Authentication (2FA)
Custom wp-login URL
Hide default login page
Disable user enumeration
Security Firewall by IP or country
Web Application Firewall (WAF)
Malware scanner with auto-cure

Frequently Asked Questions

Common questions about Security Plugin, Firewall & Malware Scanner with Auto Removal

Hackers want to get access to your website and use it to get backlinks from your site to improve their site’s PageRank or redirect your visitors to malicious sites or use your website to send spam and viruses or other attacks.These attacks can damage your reputation with readers and commentators if you fail to tackle it. It is not uncommon for some WordPress websites to receive hundreds or even thousands of attacks every week. However, by using the Security CleanTalk plugin, all attacks will be stopped on your WordPress website.

Please use the wrong username or password to log-in to your WP admin panel to see how the Security Plugin works. Then you may log-in with your correct account name and see the logs for the last actions in the settings or our plugin. Also, Audit Log will display the last visited URL's of the current user.

Yes, the plugin is compatible with WordPress MultiUser.

Go to your CleanTalk account->Log. Use filters to sort data for analyses. Security logs provide you to receive and keep information for 45 days. You have the following possibilities: 1. Time period for all records you want to see. Website for which you want to see security records. Leave the field empty to see security records for all websites. Choose an event you want to see: Authorization Login — all successful logins to your website. Authorization Logout — all closed sessions. Authorization Invalid username — login attempts with not existing username. Authorization Auth failed — wrong password login attempts. Audit View — records of actions and events of users in your website backend. Searching records by IP address. Searching records by country. There are date and time of events for each record, username who performed an action and his IP (country) address. How to use Security Log https://cleantalk.org/help/Security-Log

Yes, it is possible. Go to your CleanTalk account->Change email https://cleantalk.org/my/change-email

Access Key allows you to keep statistics up to 45 days in the cloud and different additional settings and has more possibilities to sort the data and analyses. Our plugin evolves to Cloud Technology and all its logs are transferred to Cloud. Cloud Service takes data processing and data storage and allows to reduce your webserver load.

First go to your Security Dashboard. Choose "Site Security" in the "Services" menu. Then go to your Security Log. You have the following possibilities: Time period for all records you want to see. Website for which you want to see security records. Leave the field empty to see security records for all websites. Choose an event you want to see: Authorization Login — all successful logins to your website. Authorization Logout — all closed sessions. Authorization Invalid username — login attempts with not existing username. Authorization Auth failed — wrong password login attempts. Audit View — records of actions and events of users in your website backend. Searching records by IP address. Searching records by username. Searching records by country. List of records. Each record has the following columns: Date — when the event happened. User Log — who performed actions. Event — what did he do. Status — was he Passed or Banned. IP — his IP address. Country — what country that IP belongs to. Details — some details if they are available. Please, read more https://cleantalk.org/help/Security-Log If you wish to block some countries from visiting your website, please, use this instruction: https://cleantalk.org/help/Security-Firewall

First go to your Security Dashboard. Choose "Site Security" in the "Services" menu. Then press the line "Black&White Lists" under the name of your website. You can add records of different types to your black list or white list: IP-Addresses (For example 10.150.20.250, 10.10.10.10) Subnets (For example 10.150.20.250/24, 10.10.10.10/8) Countries. Click the line "Add a country" to blacklist or whitelist all IP-addresses of the chosen countries. The records can be added one by one or all at once using separators: comma, semicolon, space, tab, or new line. After filling the field press the button "Whitelist" or "Blacklist". All added records will be displayed in your list below. Please note, all changes will be applied in 5-10 minutes. Please, read full instruction here https://cleantalk.org/help/Security-Firewall

Open another browser or enter the incognito mode. Type address YOUR_WEBSITE/?security_test_ip=ANY_IP_FROM_BLACK_LIST 2.1 Address 10.10.10.10 is local address and it's in blacklist constantly. So address YOUR_WEBSITE/?security_test_ip=10.10.10.10 will works everytime. Make sure that you saw page with the blocking message. FireWall works properly, if it is not, see item 4 of the list.

Malware scanner will check and compare with the original WP files and show you what files were changed, deleted, or added. Malware scanner could be used to find an added code in WP files. On your Malware Security Log page, you will see the list of all scans that were performed for your website. The CleanTalk Cloud saves the list of the found files for you to know where to look them for.