Blog
MAL{ai} 3.0: Detect WordPress PHP Malware with 99% Accuracy
We've rebuilt MAL{ai} from the ground up. It catches PHP malware that signature scanners miss, and it stops flagging the clean files that waste your time. Fewer scares, fewer infections, and answers you can act on.
Continue Reading →
Why the OptinMonster CDN Attack Is a Case for On-Site WordPress Security
On 12 June 2026, a compromised CDN credential turned OptinMonster and TrustPulse into malware delivery vehicles targeting WordPress admins. Cloudflare couldn't stop it. A WAF couldn't stop it. We look at why on-site WordPress security is the layer that actually matters here, and what Shield is building next to catch an attack technique most security tools can't even see.
Continue Reading →
Introducing Mandate App Security – Scope What Your Connected Tools Can Do in WordPress
Mandate App Security is a new WordPress plugin that narrows what a connected tool can do after it authenticates with an Application Password. You choose which capabilities to allow, and Mandate enforces that scope on every request the password makes. It's built for sites connecting to AI tools, automation platforms, REST API clients, and MCP connectors.
Continue Reading →
Why Shield Security is Dropping PHP 7.4 Support
PHP 7.4 has been without a security patch since November 2022, and the consequences are now catching up with plugins that depend on it. Shield Security's next major release will require PHP 8.2 as a minimum. Here's why the change is necessary and what you need to do before it arrives.
Continue Reading →
WP Shield Security PRO – Release 22.0
ShieldPRO 22.0 is one of our most ambitious releases yet. It completely transforms your relationship with WordPress security by always guiding you towards the issues that need your most attention when you need it.
Continue Reading →
WordPress Security Breach Symptoms and 5-Step Recovery
Spot breach symptoms fast, follow a 5-step recovery plan, and prevent reinfection with automation that matches the exploit window.
Continue Reading →
How to Test WordPress for SQL Injection Vulnerabilities
Learn how SQL injection targets WordPress plugins and themes, how to test your site for vulnerabilities, and what to do if an attack leaves its mark.
Continue Reading →
Free Wordfence vs Free MalCare: The True Cost of WordPress Security
Compare Wordfence Free and MalCare Free on real cleanup capability, server performance, and what each plan actually costs when your site gets compromised.
Continue Reading →
WordPress Hardening Checklist: Secure Your Site Step-by-Step
Improve your WordPress security with advanced hardening strategies, including reliable plugins, managed hosting services, and data backup.
Continue Reading →
WP Shield Security PRO – Release 21.2
ShieldPRO 21.1 delivers full translation into nearly 40 languages, powerful new search capabilities for Activity and Traffic Logs, redesigned report emails, and a range of dashboard and performance improvements.
Continue Reading →