{"id":380673,"date":"2026-10-04T01:45:13","date_gmt":"2026-10-04T01:45:13","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/antivirus-ai-malware-scanner-security\/"},"modified":"2026-11-03T19:43:26","modified_gmt":"2026-11-03T19:43:26","slug":"shieldlume-security","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/shieldlume-security\/","author":23598240,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.1.5","stable_tag":"1.1.5","tested":"7.1.4","requires":"6.8","requires_php":"8.3","requires_plugins":null,"header_name":"Malware Scanner by Antivirus.ai \u2013 Shieldlume Security","header_author":"pluginsshop","header_description":"Evidence-driven local security checks. Limited beta; review coverage and limitations before relying on results.","assets_banners_color":"101e2b","last_updated":"2026-11-03 19:43:26","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/antivirus.ai\/","header_author_uri":"https:\/\/plugins.shop\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":64,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.1.5":{"tag":"1.1.5","author":"pluginsshop","date":"2026-11-03 19:43:26","revision":3782530}},"upgrade_notice":{"1.1.5":"<p>Update Free first, then matching Pro, without uninstalling. Existing evidence, settings and independent service permissions are retained.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3782530,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3782530,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256},"icon.svg":{"filename":"icon.svg","revision":3782530,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3782530,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3782530,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.1.5"],"block_files":[],"assets_screenshots":{"screenshot-1.jpg":{"filename":"screenshot-1.jpg","revision":3782530,"resolution":"1","location":"assets","locale":"","width":1425,"height":990},"screenshot-2.jpg":{"filename":"screenshot-2.jpg","revision":3782530,"resolution":"2","location":"assets","locale":"","width":1425,"height":990},"screenshot-3.jpg":{"filename":"screenshot-3.jpg","revision":3782530,"resolution":"3","location":"assets","locale":"","width":1425,"height":990},"screenshot-4.jpg":{"filename":"screenshot-4.jpg","revision":3782530,"resolution":"4","location":"assets","locale":"","width":375,"height":812},"screenshot-5.jpg":{"filename":"screenshot-5.jpg","revision":3782530,"resolution":"5","location":"assets","locale":"","width":1425,"height":990}},"screenshots":{"1":"Free 1.1.5 dashboard with fictional retained practice records, coverage guidance and labelled Site context.","2":"Free 1.1.5 Findings with fictional practice data and local guidance; an interface example, not a detection benchmark.","3":"Free 1.1.5 Protection showing deliberate local request controls and their limits.","4":"Free 1.1.5 mobile navigation and Pro previews switch, saved per administrator on this site.","5":"Free 1.1.5 More Plugins collection with bundled logos and chosen external links."}},"plugin_section":[],"plugin_tags":[168808,1174,55021,600,1909],"plugin_category":[54],"plugin_contributors":[289814],"plugin_business_model":[],"class_list":["post-380673","plugin","type-plugin","status-publish","hentry","plugin_tags-file-integrity","plugin_tags-firewall","plugin_tags-malware-scanner","plugin_tags-security","plugin_tags-two-factor-authentication","plugin_category-security-and-spam-protection","plugin_contributors-pluginsshop","plugin_committers-antivirusai","plugin_committers-pluginsshop"],"banners":{"banner":"https:\/\/ps.w.org\/shieldlume-security\/assets\/banner-772x250.png?rev=3782530","banner_2x":"https:\/\/ps.w.org\/shieldlume-security\/assets\/banner-1544x500.png?rev=3782530","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/shieldlume-security\/assets\/icon.svg?rev=3782530","icon":"https:\/\/ps.w.org\/shieldlume-security\/assets\/icon.svg?rev=3782530","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/shieldlume-security\/assets\/screenshot-1.jpg?rev=3782530","caption":"Free 1.1.5 dashboard with fictional retained practice records, coverage guidance and labelled Site context."},{"src":"https:\/\/ps.w.org\/shieldlume-security\/assets\/screenshot-2.jpg?rev=3782530","caption":"Free 1.1.5 Findings with fictional practice data and local guidance; an interface example, not a detection benchmark."},{"src":"https:\/\/ps.w.org\/shieldlume-security\/assets\/screenshot-3.jpg?rev=3782530","caption":"Free 1.1.5 Protection showing deliberate local request controls and their limits."},{"src":"https:\/\/ps.w.org\/shieldlume-security\/assets\/screenshot-4.jpg?rev=3782530","caption":"Free 1.1.5 mobile navigation and Pro previews switch, saved per administrator on this site."},{"src":"https:\/\/ps.w.org\/shieldlume-security\/assets\/screenshot-5.jpg?rev=3782530","caption":"Free 1.1.5 More Plugins collection with bundled logos and chosen external links."}],"raw_content":"<!--section=description-->\n<p>Shieldlume Security by Antivirus.ai is a WordPress security plugin for local malware scanning, file integrity checks, login security and selected request filtering. Part of the Plugins.shop collection.<\/p>\n\n<h4>Free malware scanning and file integrity<\/h4>\n\n<ul>\n<li>Local file\/database-content checks, confidence, severity and coverage gaps.<\/li>\n<li>Optional official file-integrity references; a difference alone is not malware.<\/li>\n<li>Manual\/daily cron scans, saved progress, guidance, exports and optional alerts.<\/li>\n<li>Optional authenticator\/passkey second factor and local request filtering.<\/li>\n<li>Clear findings, grouped Settings, mobile View options and a local plugin collection.<\/li>\n<\/ul>\n\n<p>Free local tools need no account or paid key. External sources need separate configuration\/permission. ClamAV needs a host engine, protected socket and current definitions. Structural\/ClamAV checks are bounded to 2 MiB per eligible file; integrity reads to 16 MiB. Incomplete results remain visible. No clean-site or comprehensive-detection guarantee is made.<\/p>\n\n<h4>The separate Pro add-on<\/h4>\n\n<p>Pro adds schedules, investigations, reports and reviewed eligible file restoration, using the same scanner. Its first online licence activation unlocks local tools; expiry\/outages retain that unlock, explicit Disconnect removes it. Connected services\/AI need separate consent and eligible access. AI cannot approve repairs. Free never downloads Pro code.<\/p>\n\n<p><a href=\"https:\/\/antivirus.ai\/docs\/\">Guide<\/a> | <a href=\"https:\/\/antivirus.ai\/pricing\/\">Free and Pro details<\/a> | <a href=\"https:\/\/antivirus.ai\/scanner-methods\/\">Methods and limits<\/a> | <a href=\"https:\/\/antivirus.ai\/privacy\/\">Privacy<\/a><\/p>\n\n<h3>External services and privacy<\/h3>\n\n<p>Activation starts no scan\/provider request. Connections below need separate permission\/configuration; there is no usage\/conversion telemetry. <a href=\"https:\/\/antivirus.ai\/docs\/privacy-and-services.txt\">Full technical, retention and withdrawal details<\/a> are also bundled in docs\/privacy-and-services.md, docs\/protection.md and privacy.txt.<\/p>\n\n<ul>\n<li><strong>Welcome choices and email:<\/strong> initially unchecked. Compatibility sharing sends the displayed domain, WordPress\/PHP versions and language; independent email signup sends the editable address and reported edition to https:\/\/antivirus.ai\/newsletter-api\/v1\/plugin-welcome\/ . Consented reports refresh at most weekly, plus edition changes. Email needs confirmation; no source, findings or customer records are sent. Stop sharing in Protection settings; unsubscribe confirmed email separately. The operator is A.M.E.X. Internet Marketing ltd, Cyprus, using a United States GoDaddy VPS, Cloudflare and its mail relay. Terms: https:\/\/antivirus.ai\/terms\/ . Privacy\/withdrawal: https:\/\/antivirus.ai\/privacy#welcome and https:\/\/antivirus.ai\/newsletter\/privacy .<\/li>\n<li><strong>WordPress.org references:<\/strong> permitted scan\/reference jobs send requested component names\/versions, core locale, server IP and timing. Official checksum\/package data is compared locally. Privacy: https:\/\/wordpress.org\/about\/privacy\/ .<\/li>\n<li><strong>Wordfence Intelligence:<\/strong> a separately permitted\/configured feed request uses your API credential and server network connection; no site source files are uploaded. Saving a token does not enable requests. Terms: https:\/\/www.wordfence.com\/wordfence-intelligence-terms-and-conditions\/ . Privacy: https:\/\/www.wordfence.com\/privacy-policy\/ .<\/li>\n<li><strong>Signed indicators:<\/strong> an optional host-configured publisher receives protocol\/version metadata and server IP when permitted updates run, not inventory, source or samples. Its destination\/privacy policy is displayed before enabling. No public publisher or maintained corpus is included.<\/li>\n<li><strong>ClamAV:<\/strong> separately enabled eligible file bytes go only to a protected daemon on this host, not a cloud scanner. The host manages FreshClam requests and daemon logs. Guidance: https:\/\/docs.clamav.net\/manual\/Usage\/SignatureManagement.html .<\/li>\n<li><strong>Emerging Threats:<\/strong> separately permitted downloads normally request https:\/\/rules.emergingthreats.net\/blockrules\/compromised-ips.txt every 12 hours. The provider sees server IP\/timing, not visitor IPs or file contents; matching is local. Licence: https:\/\/community.emergingthreats.net\/t\/licensing-is-the-compromised-ips-list-also-open\/676 . Privacy: https:\/\/www.proofpoint.com\/us\/legal\/privacy-policy .<\/li>\n<li><strong>Pwned Passwords:<\/strong> separately permitted supported password checks send five SHA-1 hash-prefix characters, server IP and timing to https:\/\/api.pwnedpasswords.com , never the password, full hash, username or email. Matching is local. Information: https:\/\/haveibeenpwned.com\/Passwords . Privacy: https:\/\/haveibeenpwned.com\/Privacy .<\/li>\n<li><strong>Exposure checks:<\/strong> separately permitted bounded HTTPS requests go to this site's public WordPress address. Its host\/CDN sees selected paths, server IP and timing; up to 512 response bytes are compared transiently, not uploaded to antivirus.ai.<\/li>\n<li><strong>Notifications:<\/strong> optional alerts and explicit tests use your configured WordPress mail provider, notification content and recipient. A successful mail handoff does not prove inbox delivery; interrupted or uncertain sends need review. Exports and recovery evidence can be sensitive.<\/li>\n<\/ul>\n\n<p>The separately installed Pro service has its own pairing, licence and consent controls. Optional AI sends minimized detector metadata to the configured service\/provider, not source files; it does not independently verify infection. Managed-service privacy\/terms: https:\/\/orderfloor.com\/antivirus-service\/privacy and https:\/\/orderfloor.com\/antivirus-service\/terms . Provider privacy: https:\/\/openai.com\/policies\/privacy-policy\/ . Free does not contact that Pro service. Hosted uptime, Google homepage reputation and managed country rules are unavailable in this release.<\/p>\n\n<p>Account\/security records and optional history stay local unless an independently chosen connection shares its documented data. Hiding previews does not withdraw existing sharing. Stopping a connection may leave a visible pending withdrawal when unreachable; messages already sent and rotated backups cannot be recalled. This is self-service software without managed cleanup or response-time guarantees. Support: https:\/\/antivirus.ai\/contact\/ .<\/p>\n\n<h3>Source code and third-party notices<\/h3>\n\n<p>Readable PHP\/JavaScript\/CSS and local fonts\/logos are bundled; no remote promotional assets load. Authentication\/QR upstream sources, builds and MIT licences: vendor\/auth\/NOTICE.md. Space Grotesk OFL: assets\/fonts\/OFL.txt. Full retained notes: docs\/privacy-and-services.md.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Keep an independent backup; use a disposable\/backed-up staging site first.<\/li>\n<li>Activate Free on single-site WordPress 6.8+ with PHP 8.3+. Multisite is refused.<\/li>\n<li>Review Setup guide, then start a scan. Continue batches or run WordPress cron.<\/li>\n<li>Review findings\/coverage; use authorized WordPress tools, trusted backups or software reinstallation, then rescan. Free does not replace component files.<\/li>\n<li>For Pro, update Free 1.1.5 first, then matching Pro without uninstalling; keep both active and activate its licence separately.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"do%20i%20need%20an%20account%20or%20ai%20to%20scan%3F\"><h3>Do I need an account or AI to scan?<\/h3><\/dt>\n<dd><p>No. Free local scans, full findings and guidance need neither. References\/feeds need separate permission\/configuration. No maintained external malware-signature feed is bundled. AI belongs to the separate Pro add-on.<\/p><\/dd>\n<dt id=\"where%20are%20settings%20and%20the%20preview%20switch%3F\"><h3>Where are settings and the preview switch?<\/h3><\/dt>\n<dd><p>Settings groups Protection settings, Setup guide and Data &amp; uninstall. The Pro previews switch saves a per-administrator\/site choice: hiding removes preview links\/suggestions; showing also restores individually dismissed suggestions. It stays available when hidden. Free tools\/consent are unchanged. Mobile View options groups Theme, motion and full screen; native forms work without JavaScript.<\/p><\/dd>\n<dt id=\"does%20more%20plugins%20install%20or%20track%20anything%3F\"><h3>Does More Plugins install or track anything?<\/h3><\/dt>\n<dd><p>No. Catalog\/logos are local; chosen links open Plugins.shop. Each product has its own terms\/availability. The page installs nothing and creates no marketing enrolment.<\/p><\/dd>\n<dt id=\"does%20uninstall%20erase%20evidence%20or%20stop%20sharing%3F\"><h3>Does uninstall erase evidence or stop sharing?<\/h3><\/dt>\n<dd><p>Keep data is the default; reinstalling can resume retained sharing. Stop sharing\/unsubscribe separately. Settings &gt; Data &amp; uninstall provides guarded, confirmed local removal. Backups, exports, provider data and host configuration need separate handling. See docs\/data-uninstall.md and docs\/privacy-and-services.md.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.1.5<\/h4>\n\n<ul>\n<li>Separate plugin branding from labelled Site context; compact mobile controls into accessible View options.<\/li>\n<li>Add a saved per-administrator\/site Pro previews switch, compact preview rows and a separate More Plugins entry.<\/li>\n<li>Preserve security settings, evidence, licence state and independent service choices; clarify documentation and Free\/Pro boundaries.<\/li>\n<\/ul>\n\n<p>Complete earlier release history is preserved in the bundled changelog.txt.<\/p>","raw_excerpt":"Local malware and file integrity checks, two-factor sign-in and request filtering by Antivirus.ai. Free local tools need no account.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/380673","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=380673"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/pluginsshop"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=380673"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=380673"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=380673"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=380673"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=380673"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=380673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}