• This plugin gave me a great heads-up about a links injected into my posts and pages.

    I cleaned up the 100+ pages which had between 1-7 backlinks infecting them each page.

    Then I decided to randomly check a few other posts that had not been flagged — and I found around 25% of the remaining 500 posts still had the infection. And Malcure didn’t find them (and still doesn’t).

    I have been checking and clearing them manually. Not fun, but effective.

    I also changed the password, updated plugins, and deleted non active and older plugins that were not updated. I don’t know how they got access, but nothing new has come through in the past few weeks.

    So — great plugin for warning and finding a bunch of malware. But it missed A LOT (hundreds of infections). Room for improvement but a decent tool when used with other strategies.

    • This topic was modified 5 months, 1 week ago by rjc3000.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Malcure Web Security

    (@malcure)

    Thank you for using Malcure and for your review. The plugin is not meant for scanning spam. Check the underlying root-cause that is creating these spam posts instead.

    Thread Starter rjc3000

    (@rjc3000)

    These were not spam messages – they were pharmacy ad injections right into the existing posts. I found and removed the source. And Malcure was essential for discovering them in the first place. But even when I knew there were still wordpress posts with the injection in the content, Malcure did not find all of them. Maybe it has been addressed in an update? Plus the scans have been clear since so thank you!

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this review.