Marcus Downing

<p>This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.</p>
<p>This information is only visible to administrators (or more precisely, those with the <code>manage_options</code> capability). Subscribers, authors and editors cannot see the data.</p>
<h3>Source</h3>
<p>The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/. It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.</p>
<h3>Note</h3>
<p>Using this plugin does not guarantee that your site has no vulnerabilities. It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security. This plugin is only a tool; using it responsibly is up to you.</p>
<h3>WP-CLI</h3>
<p>This plugin registers a WP-CLI command, that allows you to scan from the command line. The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).</p>
<ul>
<li><code>wp vuln scan</code>, to report all known vulnerabilities.</li>
<li><code>wp vuln plugins</code>, to report only vulnerabilities in plugins.</li>
<li><code>wp vuln themes</code>, to report only vulnerabilities in themes.</li>
<li><code>wp vuln wp</code>, to report only vulnerabilities in WordPress core.</li>
<li><code>wp vuln details</code>, to show a more detailed output on known vulnerabilities.</li>
<li><code>wp vuln clear</code>, to clear the internal cache of vulnerability data. This will result in making extra requests to the API, and is probably not needed.</li>
</ul>


Bang Vulnerability Scanner

Reports if your WordPress site has any known vulnerabilities.

fullworks

<p>This plugin is your website’s security sentinel, keeping an eye on potential threats without making it sound too techy. It checks your WordPress core, themes, and plugins to find any weak spots. If it spots something amiss, you’ll get a friendly email alert to let you know there’s something worth looking at.</p>
<p>This clever tool relies on a powerful database to get its info, helping it keep an eye out for common WordPress vulnerabilities.</p>
<p>But it’s not just about vulnerabilities. The plugin also keeps an eye on abandoned plugins and themes, which can be a backdoor for trouble. With this plugin, you can easily keep your website secure and reduce the risk of security breaches.</p>
<p>The report page gives you the power to decide what to do next. If it finds something, you can choose to ignore it, especially if you have an old theme you love but it’s no longer getting updates. You can also give a thumbs-up to plugins or themes you know are safe.</p>
<p>Plus, the report gives you a quick peek at what’s changed with plugins that have updates available. This helps you decide if those updates are worth it.</p>
<p>If you’re more of a command-line person, you can run a security audit with the command wp fullworks-scanner. It won’t send you an email, but it’ll tell you what it found right there in your console.</p>
<p>In a nutshell, this handy WordPress security tool does the heavy lifting, making sure your site stays safe and sound. It’s like having a watchful eye on your website without all the jargo</p>
<h4>Key Features</h4>
<p>✓ Comprehensive Scan: Checks your WordPress Core version, installed themes, and plugins for vulnerabilities.<br />
✓ Vulnerability Database: References the WordPress Vulnerability Database API for up-to-date threat information.<br />
✓ Abandoned Plugin/Theme Detection: Identifies and alerts you about abandoned plugins or themes that can pose security risks.<br />
✓ Customizable Scanning Schedule: Adjust the scan frequency to match your needs.<br />
✓ User-Friendly Report: Provides detailed scan reports with the option to accept or ignore warnings and errors.<br />
✓ Change Log Highlights: Offers a quick review of plugin updates with extract from the change log.<br />
✓ WP CLI Integration: Run scans from the command line with the wp fullworks-scanner command.</p>
<h4>Easy to Use</h4>
<p>Don’t miss out on the opportunity to fortify your WordPress website effortlessly and stay one step ahead of potential threats.<br />
Try it now and experience the peace of mind that comes with superior website security. 🔒 🔒 🔒</p>


Fullworks Security Scanner


I love how easy Fullworks Security Scanner delivers notices of potential issues by email so I don't have to log into my website to check on things. A great tool for proactive security in WordPress. 


Proactive Security Audits - Awesome

Fullworks Security Scanner: Your Website's Guardian. Core, Themes, Plugins - Checked. Vulnerabilities - Squashed. Your Site - Secure.

Bang Vulnerability Scanner vs Fullworks Security Scanner