Title: MoeSec Security – Comprehensive Malware Scanner & Security Suite Author: MoeSec Published: March 11, 2025 Last modified: April 1, 2026 --- Search plugins ![](https://ps.w.org/moesec/assets/banner-772x250.jpg?rev=3253684) ![](https://ps.w.org/moesec/assets/icon-128x128.png?rev=3253625) # MoeSec Security – Comprehensive Malware Scanner & Security Suite By [MoeSec](https://profiles.wordpress.org/moesec/) [Download](https://downloads.wordpress.org/plugin/moesec.2.2.zip) * [Details](https://srd.wordpress.org/plugins/moesec/#description) * [Reviews](https://srd.wordpress.org/plugins/moesec/#reviews) * [Installation](https://srd.wordpress.org/plugins/moesec/#installation) * [Development](https://srd.wordpress.org/plugins/moesec/#developers) [Support](https://wordpress.org/support/plugin/moesec/) ## Description MoeSec.com is a comprehensive Website Security Platform to protect your website against Hackers, Malware, Vulnerabilities and various threats. The Free MoeSec Security plugin is a powerful security plugin designed to safeguard your WordPress website against a wide range of security threats. With its comprehensive set of features, MoeSec offers Malware Scanning, Malware Detection, Integrity, Logging, Backups, Brute Force & Login Protection and much more. You can visit MoeSec.com to learn more. **Key Features:** * **File and Database Malware Scanner:** Detect malicious code injections in your files or database and check for known malicious admin users with options to edit, delete, quarantine, whitelist or report a suspicious file for further investigation. * **External Security Scan:** Remote Scanning to quickly Check your website for Malware infections, Hack signs, Redirects, Abnormal behaviors and more by scanning it using our external website malware scan engine [MoeSec Website Scanner](https://scan.moesec.com). * **WordPress Core Integrity Check:** Ensure your WordPress installation hasn’t been tampered with. Scheduled Checks and Email notifications! You can whitelist any customized files or changes! * **Login Protection:** Prevent brute force attacks and implement _2FA – Two-Factor authentication_ via Email or Auth Apps such as Google Authenticator. * **Firewall:** Block requests & traffic from specific IPs, IP ranges, Geo-Blocking entire selected countries, user agents and bad bots. * **WordPress Hardening:** Implement best practices to secure your WordPress installation. * **Custom Admin URL:** You can change wp-admin to any custom admin URL for extra protection against automated attacks and bot requests! * **Bad Bot Blocking:** Prevent malicious bots from accessing your site. You can block Bots, Crawlers & User Agents! * **Backup System:** Generate Website Backups, Database Backups, Schedule Automated backups for your website! * **Scheduled Scans:** Automate security checks at regular intervals. * **Email Notifications:** Stay informed about security events and scan results. * **Much More!** MoeSec is regularly updated to address the latest security threats and WordPress vulnerabilities, ensuring that your website remains protected against emerging risks. ### External services You can integrate your website with [Recaptcha](https://www.google.com/recaptcha) or [hCaptcha](https://www.hcaptcha.com) to help mitigating spam visits or fake login attempts. Once this option is enabled, The plugin will communicate to their respected APIs using your own keys that you have created directly with the services and agreed to their terms and privacy policies. Also, This plugin is connecting and communicating to our [MoeSec Website Scanner Engine](https://scan.moesec.com) to perform external website security scans for your website. We don’t send or store anything other than the website URL/Domain during scans and processing the requests or showing scan results. Also, This plugin is fetching our update servers on [MoeSec](https://MoeSec.com) everyday to look for new signature updates. Also, For Creating QR codes, The plugin is communicating with [qrserver](https://api.qrserver.com) just for creating the needed QR codes. ### Additional Info For more information, please visit [MoeSec](https://moesec.com). If you need professional assistance with malware removal or advanced security protection for your website, please visit our [Professional Services](https://moesec.com) . ### Privacy Policy MoeSec is committed to protecting your privacy. The plugin does not collect any personal data from your website visitors. It only processes data within your WordPress installation to perform security scans and implement protective measures. ### Credits * [MoeSec](https://MoeSec.com) ### Plugin’s other home * [MoeSec Security Plugin](https://MoeSec.com/wordpress-security-plugin/) ## Screenshots * [[ * MoeSec Main Dashboard * [[ * File Malware Scanner * [[ * Database Malware Scanner * [[ * WordPress Hardening Options & Set Custom Admin URL for extra protection! * [[ * Firewall Settings * [[ * Login Protection & 2FA Configuration * [[ * External Website Scan * [[ * Customize Settings * [[ * WordPress Core Integrity Check * [[ * Settings, Scheduled Scans & Email Notifications * [[ * Quarantined Files List & Options to restore or delete. * [[ * Whitelisting Section showing whitelisted files or database entries if confirmed to be a false-positive. * [[ * Multi-Scan options to scan WP-content folder only, Plugins, Themes or any other custom or specific folders to save time & resources! * [[ * Backup system for Files, Database, Scheduled auto backups with many options! * [[ * You can change your wp-admin to your own custom admin URL for extra protection! * [[ * 2FA Login page. * [[ * 2FA via Email. * [[ * Bot blocking. You can block all requests and access from specific bot names, user agents & crawlers. * [[ * Backup System management. * [[ * “Settings > MoeSec 2FA” For more options. Force 2FA for All Users or specific Roles! ## Installation 1. Log into your WordPress Admin panel. 2. In your sidebar, Choose “Plugins” and then click “Add New”. 3. Search for “moesec” or “MoeSec Security” in the search box, 4. Select the one that shows “By MoeSec” and Click “Install Now”. 5. Once Installed and activated, You will find a new MoeSec icon in the sidebar. Click the MoeSec icon to check the main dashboard and explore all sections and configure plugin settings, scheduled scan intervals, notification email, etc. ## FAQ ### How often should I run security scans? We recommend running daily security scans for optimal protection. MoeSec allows you to configure scheduled scans to automate this process. ### Is MoeSec compatible with other WordPress plugins? Yes, MoeSec is designed to be compatible with most WordPress plugins. However, if you experience any conflicts, please contact our support team for assistance. ### How do I keep MoeSec updated? MoeSec will notify you of available updates through the WordPress admin panel. Always ensure you’re running the latest version for the best protection. Additionally, the plugin automatically updates its malware signatures daily. New threats & malware signatures or patterns may take up to 15 days to be available to our free plugin unlike our website security platform subscriptions gets it instantly. ### What should I do if MoeSec detects a threat? If MoeSec detects a threat, it will log the detection, send an email notification( if enabled), and display the threat in the MoeSec dashboard and under the Malware Scanner tab. You can then review the threat, and choose to Edit, quarantine, delete, or whitelist the file. You can Click on Edit to check the code and determine if it’s malicious or not and to clean the file if you know what you are doing, or Click on quarantine and disable the suspicious file by moving it to wp-content/moesec- quarantine folder if you are not sure if it’s malicious or not, or Click whitelist if it’s _confirmed_ as a false-positive and it will not be scanned or reported anymore. Please make sure to backup any file before editing or removing. For advanced malware infections, We recommend seeking professional [malware removal](https://MoeSec.com) services. ### Do you offer Premium or paid expert malware removal services? We can certainly help you! If you need expert assistance with malware removal, you can request professional website malware cleanup services from MoeSec.com and learn more about our complete website security platform and what it includes such as: Daily Malware Scanning, Malware Cleanup, Website Monitoring, Website Firewall[WAF], Website Antivirus, Website Backups, Trust Seal, Blacklist Monitoring, _Unlimited malware cleanup & Support requests_ and MUCH more! Check it at [MoeSec](https://MoeSec.com) ### Does MoeSec slow down my website? MoeSec is designed to have minimal impact on your website’s performance. However, during active scans, there might be a slight increase in server load for just few minutes. It depends on your hosting resources and configurations but it’s unlikely to cause any issues. You can customize scan settings and set memory limits, skip specific folders such as cache or backups, set max file size to be scanned, etc. Also, By default, The scanner will not scan media files to save time and resources. It was tested with websites with over 500k files scanned smoothly within minutes. ### What’s the External Website Security Scan? You can perform an external website security scan via the plugin to quickly check if the website is hacked, blacklisted, using outdated versions, Abnormal behaviors or any other signs or patterns of being compromised. This is being handled and processed by our free website security scanner engine [MoeSec Website Scanner](https://scan.moesec.com/)– This Remote scanner will visit your website using different browsers, Devices, Operating systems and From different Locations to see how it behaves and How it looks like. The result depends on what the scanner can see remotely on the website at that time. ### What if the plugin didn’t detect a malicious file or database entry? The plugin signatures are updated on daily basis to be able to detect new malware threats. However, New threats & malware signatures or patterns may take up to 15 days to be available to our free plugin unlike our website security platform subscriptions gets it instantly once it’s released. If you find any malicious or suspicious content that the plugin didn’t flag then you can compress the malicious/suspicious file and send it to [security@MoeSec.com](https://srd.wordpress.org/plugins/moesec/security@MoeSec.com?output_format=md) or post in the support forum to investigate it further more or report it via the plugin directly by clicking on the Report button. You can create a topic in the [Support Forum](https://wordpress.org/support/plugin/moesec) and provide a pastebin link or a screenshot of the problem. If you are a MoeSec client, you can login to your MoeSec Website Security Platform account and submit a support ticket at [MoeSec](https://MoeSec.com) ### Will I get a MoeSec account if I install and use this free plugin? No, Using this plugin is completely free of charge but it _doesn’t_ mean that you will get a free or premium account for MoeSec Website Security Platform or other premium services. ### Do I still need MoeSec’s products and services if I use this plugin? This powerful plugin is free to use and it offers essential security and protection but it doesn’t replace MoeSec’s Security platform and it’s advanced website security monitoring, malware removal, website firewall protection, Website Backups, Trust Seal and other products. ### Does this plugin offer protection against Malware injections or Vulnerabilities? It offers Daily malware scanning and detection and offers essential security hardening and login protection to your website. However, If you are looking for an advanced and real-time Website firewall [WAF] then you can check our [Website Firewall](https://MoeSec.com/website-firewall/) service that will help with blocking and preventing malware injections, hack attempts and virtual patching of vulnerabilities. ### Where to find support for this free plugin? If you have any issues, questions or concerns then you can create a topic in the [Support Forum](https://wordpress.org/support/plugin/moesec). If you are a MoeSec client, you can login to your MoeSec Website Security Platform account and submit a support ticket at [MoeSec](https://MoeSec.com). ## Reviews ![](https://secure.gravatar.com/avatar/51c583209bc74e1270b0d37952b36783c6003e2355e257efa3ac585e64d76a1c? s=60&d=retro&r=g) ### 󠀁[Very nice plugin, its works very well](https://wordpress.org/support/topic/very-nice-plugin-its-works-very-well/)󠁿 [cless212121](https://profiles.wordpress.org/cless212121/) December 18, 2025 1 reply it helped me to solve some problems about malwares in a website, tuely free ![](https://secure.gravatar.com/avatar/e8a9bafb78065ab9487462ff2f86776d4e969008179207e473c11e5cd42557aa? s=60&d=retro&r=g) ### 󠀁[Amazing plugin and wonderful gift to the WordPress community!](https://wordpress.org/support/topic/amazing-plugin-and-wonderful-gift-to-the-wordpress-community/)󠁿 [kayyleighrae](https://profiles.wordpress.org/kayyleighrae/) March 14, 2025 1 reply This very useful plugin has many features to help with security for a WordPress site. Since security isn’t always a top priority for website owners, this plugin ensures it stays front and center. Thanks MoeSec! 🙂 [ Read all 2 reviews ](https://wordpress.org/support/plugin/moesec/reviews/) ## Contributors & Developers “MoeSec Security – Comprehensive Malware Scanner & Security Suite” is open source software. The following people have contributed to this plugin. Contributors * [ MoeSec ](https://profiles.wordpress.org/moesec/) * [ Moe ](https://profiles.wordpress.org/moeo/) [Translate “MoeSec Security – Comprehensive Malware Scanner & Security Suite” into your language.](https://translate.wordpress.org/projects/wp-plugins/moesec) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/moesec/), check out the [SVN repository](https://plugins.svn.wordpress.org/moesec/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/moesec/) by [RSS](https://plugins.trac.wordpress.org/log/moesec/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 2.2 * Improved WordPress 6.9 support. * Improved Malware Scanner. #### 2.1 * WordPress 6.9 support. #### 2.0 * Improved 2FA with Role based controls. Admin can specify which roles can enable/ disable 2FA with more options to fit all needs. * Improved scheduling options for Malware Scan, Integrity Checks & Automated Backups. * UI fixes & improvement. #### 1.9 * Fixes & Improvements #### 1.8 * Added backup system for files, database, scheduling auto backups and much more. * Added custom admin url option to change wp-admin to anything else for extra protection. * Improved 2FA and Added support for Google Authenticator App by generating QR codes, etc. * Improved Integrity core checks, Added options to whitelist customized files and to schedule daily checks with notifications. * Improved wordpress hardening section and operations. * Much more! #### 1.7 * Improvement & Fixes. #### 1.6 * Added ability to manage excluded/skipped file extensions. * Added more Scan options to run full scan, wp-content only scan, scan uploads, themes folders only or even scan a specific folder which saves time and resources. You can adjust the settings to fit your hosting resources limits, You can increase or decrease limits. * Added option to restore quarantined files to it’s original path, Show more info on the quarantined file, when it was discovered/created on the website, It’s original path, when it was quarantined, it’s size etc. * Added option to whitelist suspicious and reported DB entries in case it’s confirmed and verfied as a false-positive. * Added CORS support. * Fixed & Improved UI, Styles & Formatting. #### 1.5 * Fixed & Improved Ajax handling. * Fixed & Improved UI, Styles & Formatting. #### 1.4 * Added options to customize scan settings and values such as memory limits, whitelist and skip specific folders, max file size to be scanned etc. * Improved Scan progress bar. * Improved File Scanning for faster scanning & better memory handling. * Improved Database scanning for faster scanning & better memory handling. * Fixed open_basedir restrictions on some environments. * Fixed & improved formatting, styles and UI. #### 1.3 * Improved External Scanning. * Improved Database scanning. * Fixed & improved formatting, styles and UI. #### 1.2 * Improved Scan Progress bar. * Improved scanning engine. * Fixed & improved formatting, styles and UI. #### 1.1 * First public release. ## Meta * Version **2.2** * Last updated **6 days ago** * Active installations **30+** * WordPress version ** 5.0 or higher ** * Tested up to **6.9.4** * Language * [English (US)](https://wordpress.org/plugins/moesec/) * Tags * [antivirus](https://srd.wordpress.org/plugins/tags/antivirus/)[firewall](https://srd.wordpress.org/plugins/tags/firewall/) [malware](https://srd.wordpress.org/plugins/tags/malware/)[scan](https://srd.wordpress.org/plugins/tags/scan/) [security](https://srd.wordpress.org/plugins/tags/security/) * [Advanced View](https://srd.wordpress.org/plugins/moesec/advanced/) ## Ratings 5 out of 5 stars. * [ 2 5-star reviews ](https://wordpress.org/support/plugin/moesec/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/moesec/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/moesec/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/moesec/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/moesec/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/moesec/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/moesec/reviews/) ## Contributors * [ MoeSec ](https://profiles.wordpress.org/moesec/) * [ Moe ](https://profiles.wordpress.org/moeo/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/moesec/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://MoeSec.com/)