Marcus Downing

<p>This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.</p>
<p>This information is only visible to administrators (or more precisely, those with the <code>manage_options</code> capability). Subscribers, authors and editors cannot see the data.</p>
<h3>Source</h3>
<p>The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/. It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.</p>
<h3>Note</h3>
<p>Using this plugin does not guarantee that your site has no vulnerabilities. It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security. This plugin is only a tool; using it responsibly is up to you.</p>
<h3>WP-CLI</h3>
<p>This plugin registers a WP-CLI command, that allows you to scan from the command line. The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).</p>
<ul>
<li><code>wp vuln scan</code>, to report all known vulnerabilities.</li>
<li><code>wp vuln plugins</code>, to report only vulnerabilities in plugins.</li>
<li><code>wp vuln themes</code>, to report only vulnerabilities in themes.</li>
<li><code>wp vuln wp</code>, to report only vulnerabilities in WordPress core.</li>
<li><code>wp vuln details</code>, to show a more detailed output on known vulnerabilities.</li>
<li><code>wp vuln clear</code>, to clear the internal cache of vulnerability data. This will result in making extra requests to the API, and is probably not needed.</li>
</ul>


Bang Vulnerability Scanner

Reports if your WordPress site has any known vulnerabilities.

miniOrange

<p>You will get notified as soon as the scanning is completed. You can scan your site once a day and receive detailed report with POC.</p>
<h4>This plugin actively Scans your wordpress website for top 10 OWASP Vulnerabilities.</h4>
<ul>
<li><strong>Injection.</strong> Injection flaws, such as SQL, NoSQL, OS, and LDAP injection</li>
<li><strong>Broken Authentication</strong></li>
<li><strong>Cross-Site Scripting XSS</strong></li>
<li><strong>Security Misconfiguration</strong></li>
<li><strong>Checks for WordPress API Endpoints if Accessible</strong></li>
</ul>
<h4>FREE Plugin Feature</h4>
<ul>
<li><strong>Penetration Testing Tool:</strong> Scans your wordpress website for top 10 OWASP Vulnerabilities actively.</li>
<li><strong>Email Notification:</strong> After a PenTest is completed, We send a report over email.</li>
<li><strong>Scan your site Once a day:</strong>  You can perform Pen Test on your site once every 24 hours</li>
</ul>
<p>miniOrange uses login.xecurify.com if the user chooses to register and upgrade to premium. If the user does not want to register then he can continue using the free plugin.<br />
(Link to the privacy policy – https://www.miniorange.com/privacy-policy.pdf)</p>
<p>Customized solutions and Active support are available. Email us at info@xecurify.com or call us at +1 9786589387.</p>


miniOrange Penetration Testing Tool

Actively Scans your wordpress website for top 10 OWASP Vulnerabilities like Injection, Broken Authentication , Cross-Site Scripting XSS, Security Misc …

Bang Vulnerability Scanner vs miniOrange Penetration Testing Tool