Marcus Downing

<p>This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.</p>
<p>This information is only visible to administrators (or more precisely, those with the <code>manage_options</code> capability). Subscribers, authors and editors cannot see the data.</p>
<h3>Source</h3>
<p>The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/. It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.</p>
<h3>Note</h3>
<p>Using this plugin does not guarantee that your site has no vulnerabilities. It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security. This plugin is only a tool; using it responsibly is up to you.</p>
<h3>WP-CLI</h3>
<p>This plugin registers a WP-CLI command, that allows you to scan from the command line. The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).</p>
<ul>
<li><code>wp vuln scan</code>, to report all known vulnerabilities.</li>
<li><code>wp vuln plugins</code>, to report only vulnerabilities in plugins.</li>
<li><code>wp vuln themes</code>, to report only vulnerabilities in themes.</li>
<li><code>wp vuln wp</code>, to report only vulnerabilities in WordPress core.</li>
<li><code>wp vuln details</code>, to show a more detailed output on known vulnerabilities.</li>
<li><code>wp vuln clear</code>, to clear the internal cache of vulnerability data. This will result in making extra requests to the API, and is probably not needed.</li>
</ul>


Bang Vulnerability Scanner

Reports if your WordPress site has any known vulnerabilities.

gits229

<p><strong>CMS Watchman</strong> is a powerful WordPress plugin designed to enhance website security by monitoring and reporting vulnerabilities. It integrates seamlessly with the <strong>Watchman.bj</strong> platform to provide real-time insights, advanced analytics, and actionable recommendations to protect your website against emerging threats.</p>
<h3>Key Features:</h3>
<ul>
<li><strong>Real-time vulnerability detection:</strong> Monitors WordPress core, plugins, and themes for known issues.</li>
<li><strong>Advanced reporting:</strong> Integration with <strong>Watchman.bj</strong> for detailed analytics and summaries.</li>
<li><strong>User-friendly interface:</strong> Intuitive dashboard with alerts and action recommendations.</li>
<li><strong>Automated notifications:</strong> Receive email alerts for critical security issues.</li>
<li><strong>Scheduled reports:</strong> Automatically generates weekly security reports and allows manual report generation.</li>
<li><strong>Regular updates:</strong> Ensures compatibility with the latest WordPress versions.</li>
</ul>
<p>Whether you’re managing a personal blog or a complex multi-site installation, CMS Watchman empowers you with the tools and insights needed to maintain a secure WordPress environment.</p>
<h3>External Services</h3>
<p>This plugin connects to the “CMS Watchman” API to monitor installed plugins and themes for known vulnerabilities.</p>
<p>The following data is sent to the external service when the plugin is activated and when plugin/theme information is updated:<br />
– Plugin and theme names<br />
– Plugin and theme versions<br />
– WordPress version<br />
– Website URL (to send notifications about vulnerabilities)</p>
<p>This data is sent to the CMS Watchman API at: https://cms.api.watchman.bj/api/v1/</p>
<p>This service helps administrators stay informed about potential security risks.</p>
<p>CMS Watchman Privacy Policy: https://www.watchman.bj/docs/privacy-policy<br />
CMS Watchman Terms of Service: https://www.watchman.bj/docs/terms-conditions</p>


CMS Watchman

CMS Watchman provides robust security monitoring for WordPress sites, detecting vulnerabilities and integrating seamlessly with Watchman.

Bang Vulnerability Scanner vs CMS Watchman