Title: CAS Antivirus
Author: soysupercas
Published: <strong>Hedra 3, 2026</strong>
Last modified: Hedra 3, 2026

---

Search plugins

![](https://ps.w.org/cas-antivirus/assets/banner-772x250.png?rev=3726097)

![](https://ps.w.org/cas-antivirus/assets/icon-256x256.png?rev=3726097)

# CAS Antivirus

 By [soysupercas](https://profiles.wordpress.org/soysupercas/)

[Download](https://downloads.wordpress.org/plugin/cas-antivirus.3.1.zip)

 * [Details](https://cor.wordpress.org/plugins/cas-antivirus/#description)
 * [Reviews](https://cor.wordpress.org/plugins/cas-antivirus/#reviews)
 *  [Installation](https://cor.wordpress.org/plugins/cas-antivirus/#installation)
 * [Development](https://cor.wordpress.org/plugins/cas-antivirus/#developers)

 [Support](https://wordpress.org/support/plugin/cas-antivirus/)

## Description

Lightweight Security. Powerful Protection.

CAS Antivirus is a lightweight yet powerful security plugin designed to protect 
WordPress websites through an intuitive, modern and easy-to-use interface.

Whether you manage a personal blog, a business website or an online store, CAS Antivirus
helps defend your WordPress installation against common security threats without
compromising performance. It is suitable for both beginners and advanced users looking
for reliable protection with minimal configuration.

Unlike many free security plugins, CAS Antivirus includes a powerful malware scanner
with WordPress core integrity verification and automatic core restoration. Modified
core files can be detected and restored safely using the official WordPress core.

The plugin also provides six essential HTTP Security Headers to improve browser-
level security together with Two-Factor Authentication (TOTP) to protect administrator
accounts from unauthorized access. All QR codes are generated locally, ensuring 
authentication data never depends on third-party services.

Why Choose CAS Antivirus?

 * Lightweight and optimized for performance.
 * No third-party services: only official WordPress.org endpoints (see External 
   services).
 * Local QR code generation for maximum privacy.
 * Automatic WordPress core restoration.
 * Easy to configure with a modern interface.
 * Fully translated into 19 languages.

CAS Antivirus is fully translated into 19 languages: English, Spanish, French, German,
Italian, Danish, Portuguese, Polish, Dutch, Swedish, Finnish, Norwegian Bokmål, 
Russian, Chinese, Japanese, Czech, Romanian, Hungarian and Slovak, providing a native
experience for WordPress users worldwide.

#### Free Features

 * Malware scanner with WordPress core integrity verification.
 * Automatic WordPress core restoration.
 * Six essential HTTP Security Headers.
 * Two-Factor Authentication (TOTP).
 * Local QR code generation.
 * Modern and intuitive administration interface.
 * Fully translated into 19 languages.

#### Professional Features

The Pro version includes everything in the Free version, plus:

 * Advanced real-time firewall.
 * Additional security hardening shields.
 * Custom login URL protection.
 * Custom 404 page.
 * Login activity monitoring.
 * Failed login log.
 * Security event logging.
 * Additional monitoring tools.
 * Extra security modules.

The free version provides essential protection for WordPress, while the Pro version
delivers a complete security suite with advanced firewall protection, monitoring
and access control.

### External services

This plugin connects to the official WordPress.org servers in two situations. No
other external service is used, and no data is sent to the plugin author.

#### WordPress.org Core Checksums API (api.wordpress.org)

Used by the Core File Integrity Monitor to obtain the official checksums of your
WordPress version and detect modified or missing core files.

 * Data sent: your WordPress version number and site locale (for example “6.8” and“
   es_ES”), as part of the request URL. As with any web request, the server also
   receives your site’s IP address.
 * When: each time an administrator runs an integrity scan.
 * Service provided by WordPress.org: [Terms of use](https://wordpress.org/about/tos/)/
   [Privacy policy](https://wordpress.org/about/privacy/).

#### WordPress.org release downloads (downloads.wordpress.org)

Used by the core restoration tool to download the official zip of your installed
WordPress version, so modified or missing core files can be replaced with the original
ones.

 * Data sent: your WordPress version number, as part of the download URL. The server
   also receives your site’s IP address.
 * When: only when an administrator explicitly starts the core restoration.
 * Service provided by WordPress.org: [Terms of use](https://wordpress.org/about/tos/)/
   [Privacy policy](https://wordpress.org/about/privacy/).

QR codes for Two-Factor Authentication are generated locally on your server. No 
QR or authentication data is sent to any external service.

## Screenshots

[[

[[

[[

[[

## Installation

 1. Upload the plugin to the `/wp-content/plugins/` directory.
 2. Activate the plugin from the WordPress Plugins page.
 3. Open **CAS Antivirus** from the WordPress administration menu.
 4. Configure the desired security options.

## FAQ

### Does it work with any WordPress theme?

Yes. CAS Antivirus works independently of the active theme.

### Is Two-Factor Authentication included?

Yes. The plugin supports any TOTP compatible application such as Google Authenticator,
Microsoft Authenticator, Authy and similar apps.

### Does it modify WordPress core files?

CAS Antivirus does not alter WordPress core files during normal operation. It only
writes to core files when you explicitly run the core restoration tool to replace
modified or missing files with the official WordPress versions.

### Does it require an external service to generate QR codes?

No. QR codes are generated locally by the plugin.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“CAS Antivirus” is open source software. The following people have contributed to
this plugin.

Contributors

 *   [ soysupercas ](https://profiles.wordpress.org/soysupercas/)

[Translate “CAS Antivirus” into your language.](https://translate.wordpress.org/projects/wp-plugins/cas-antivirus)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/cas-antivirus/), check
out the [SVN repository](https://plugins.svn.wordpress.org/cas-antivirus/), or subscribe
to the [development log](https://plugins.trac.wordpress.org/log/cas-antivirus/) 
by [RSS](https://plugins.trac.wordpress.org/log/cas-antivirus/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 3.1

 * Added Two-Factor Authentication (TOTP).
 * Added local QR code generation.
 * Added WordPress core restoration.
 * Improved malware scanner.
 * Improved HTTP Security Headers.
 * Performance improvements.
 * Various bug fixes.

#### 3.0

 * Initial public release.
 * 6 HTTP Security Headers.
 * Malware scanner with WordPress core integrity verification.
 * Automatic WordPress core restoration.

## Meta

 *  Version **3.1**
 *  Last updated **12 our ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.2 or higher **
 *  Tested up to **7.1.2**
 *  PHP version ** 7.4 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/cas-antivirus/)
 * Tags
 * [2FA](https://cor.wordpress.org/plugins/tags/2fa/)[antivirus](https://cor.wordpress.org/plugins/tags/antivirus/)
   [security](https://cor.wordpress.org/plugins/tags/security/)[Security Headers](https://cor.wordpress.org/plugins/tags/security-headers/)
   [two factor](https://cor.wordpress.org/plugins/tags/two-factor/)
 *  [Advanced View](https://cor.wordpress.org/plugins/cas-antivirus/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/cas-antivirus/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/cas-antivirus/reviews/)

## Contributors

 *   [ soysupercas ](https://profiles.wordpress.org/soysupercas/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/cas-antivirus/)