Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal 16.8

  • Severity: medium-risk
  • Status: Fixed
  • Publication: June 12, 2025

The Malcure Malware Scanner is a popular plugin for WordPress websites that helps remove malware. However, it has a security vulnerability in all versions up to 16.8. This means that attackers with certain access to the website can read any file on the server, even if it contains private information.

Detected in:

Malcure Malware Scanner — #1 Toolset for Malware Removal fixed vulnerable versions:
Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal fixed vulnerable versions: >= * <= 16.8
Malcure Malware Scanner — Advanced Toolset for Malware Removal fixed vulnerable versions:
Malcure Malware Scanner — Advanced Virus and Infection Cleanup fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.