wp2shell: more than a month later. Confirm 6.8.6, 6.9.5, 7.0.2. Patched is not clean.

Read the advisory

Pro · Detect & clean

WP Security Ninja

Find malicious code before it becomes a crisis

Scan for suspicious files, review clear findings, clean or whitelist with confidence, and verify WordPress.org plugins have not been tampered with.

  • ✓ One-click scan
  • ✓ Cleanup tools
  • ✓ Plugin integrity
Find malicious code before it becomes a crisis

Watch the walkthrough

Watch how the malware scanner finds malicious code on your WordPress site.

Scan WordPress for malware

Know what is on your site

Malware hides in plain sight. The scanner helps you find suspicious patterns, review severity and guidance, and act, clean, whitelist, or investigate.

  • ✓ Clear results table with actions
  • ✓ Whitelist when a finding is a false alarm
  • ✓ Summary strip for last-scan context
Malware docs

Plugin integrity checks

Plugins from WordPress.org should match official checksums. Unexpected modifications are an early warning that something may be wrong.

  • ✓ Compare against official checksums
  • ✓ Flag suspicious folder structure when checksums are unavailable
  • ✓ Include findings in scheduled reports on Pro
Scheduled scans

Better with firewall and core checks

Cleanup is step two. Blocking bad traffic and verifying core files reduces how often you need emergency scans.

  • ✓ Cloud Firewall keeps attackers out
  • ✓ Core Scanner verifies WordPress originals
  • ✓ AI Advisor can include malware context on Pro
Cloud Firewall

Customer reviews

4.9 / 5 from 258 reviews

Leave a review

So Glad to Find This

“WP Security Ninja Review I've been using WP Security Ninja for several weeks now, and I must say, it has exceeded all my expectations.”

revtrevrevtrev

Works well as a base security plugin

“WP Security Ninja stands out with a balanced and clear mix of features. It works well as an all-in-one solution but remains simple enough to combine with tools like Patchstack with…”

bubdevbubdev

Amazingly user-friendly security plugin

“Thank you, Security Ninja! Your plugin is easy to use, provides clear reports of activity, and includes built-in tools that make security a lightweight task.”

joshuarbealjoshuarbeal

“I love the WP Security Ninja product. As a startup agency, it has made my entry into the market and my ability to stand out in my offerings much easier. Keep up the good work.”

Shawn McGinnisShawn McGinnis

See all 258 reviews

Frequently asked questions

Is malware scanning free?+

No. Malware scanning and cleanup are Pro features. Free still includes Core Scanner, vulnerability scanning, and security tests. How scanner types differ: https://wpsecurityninja.com/wordpress-security-scanner-comparison/.

What if a file looks infected but is legitimate?+

Review the guidance, then whitelist when appropriate. Integrity and structural findings are meant for human review.

How does this relate to a full WordPress security scanner?+

Malware scanning is one job. Vulnerability checks and core integrity are others. See the WordPress security scanner comparison for how those jobs fit together: https://wpsecurityninja.com/wordpress-security-scanner-comparison/.

Scan and clean with Pro

Malware scanner, Cloud Firewall, 2FA, and scheduled reports - all in Security Ninja Pro.

Get Pro

Larger screenshot

Enlarged image