Get email alerts for file and permission changes on your WordPress sites. No false positives!
As of April 2026, Melapress File Monitor is a WordPress security plugin with 5.0K+ active installations and a 4.1/5 rating from 32 reviews. It has been downloaded 129K+ times in total. Requires WordPress 5.0+ and PHP 8.0+. Available on WordPress.org since 2019. Recently updated within the last 3 months. Downloads are down 9% this week. Support resolution rate: 50%. Top alternative: Wordfence Security – Firewall, Malware….
Melapress File Monitor is a WordPress file integrity monitoring plugin that keeps track of file and permission changes on your WordPress websites. It enables you to promptly identify code changes, file and directory permission changes, leftover files, malicious code, and malware injections – and take action.
Install Melapress File Monitor on your website to:
* Detect malware, infected files or files altered by bad actors
* Keep track of the last code changes on your website for easier troubleshooting
* Identify changes in file and directory permissions
* Identify leftover & backup files that can lead to sensitive business & technical data exposure
* Spot malware…
Awesome plugin
I’m not expecting / warranting an answer, I just want to state for the record (and for other interested parties) that this plugin is very badly coded and has caused me a lot of problems.
First off, it doesn’t purge its Cron jobs and wp_options after being disabled/removed.
Second off, those Cron jobs and wp_options have created an absolute BLOAT on my site. After just a couple of week there were MILLIONS of mfm_directory_runner% spam entries in my wp_options. Also the daily mfm_monitor_file_changes cron job was crashing my php-fpm (resource exhaustion).
If you want to monitor file changes on the site, it’s much better to write a short bash script and run it through a cron job, than doing anything at the WordPress level. This plugin has been a big mistake, and any plugin like it would very likely also be a big mistake.
Melapress is a great plugin but I hate it when plugins doesn’t clean-up their DB table leftover after uninstall.
Add an option in the settings to delete db tables on uninstall.
If you want to uninstall this completely, drop these 6 tables
mfm_events
mfm_events_metadata
mfm_scanned_directories
mfm_scanned_files
mfm_stored_directories
mfm_stored_files
Only just started using it really, but it seems to be doing what we need. Support were very quick in creating a patch for a bug that turned up.
We are using it for more than 2 years now with real great results. One of its kind for such a topic (files monitor). Really recommended.
| WordPress | 5.0+ requiredTested up to 6.9.4 |
| PHP | 8.0+ required |
New features
*, **, and ? wildcards when defining the directories you want to exclude.Plugin improvements
…and 18 more changes
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.