Marcus Downing

This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.
This information is only visible to administrators (or more precisely, those with the <code>manage_options</code> capability). Subscribers, authors and editors cannot see the data.
<h3>Source</h3>
The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/. It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.
<h3>Note</h3>
Using this plugin does not guarantee that your site has no vulnerabilities. It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security. This plugin is only a tool; using it responsibly is up to you.
<h3>WP-CLI</h3>
This plugin registers a WP-CLI command, that allows you to scan from the command line. The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).
<ul>
<li><code>wp vuln scan</code>, to report all known vulnerabilities.</li>
<li><code>wp vuln plugins</code>, to report only vulnerabilities in plugins.</li>
<li><code>wp vuln themes</code>, to report only vulnerabilities in themes.</li>
<li><code>wp vuln wp</code>, to report only vulnerabilities in WordPress core.</li>
<li><code>wp vuln details</code>, to show a more detailed output on known vulnerabilities.</li>
<li><code>wp vuln clear</code>, to clear the internal cache of vulnerability data. This will result in making extra requests to the API, and is probably not needed.</li>
</ul>

Bang Vulnerability Scanner

Reports if your WordPress site has any known vulnerabilities.

Dinesh Pilani

compatshield

The Plugin Compatibility Checker helps you keep your WordPress site stable and secure by scanning installed plugins for PHP and WordPress version compatibility.
$1/month License Required (Entry Plan) 
You must subscribe to the CompatShield Portal ($1/month recurring) to obtain a license key. Once activated, you will be able to see plugin compatibility results (up to PHP 8.4) directly inside your WordPress admin.
📺 Video Tutorial 
Watch step-by-step how to activate your license & run your first scan: 
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/PCxhJmO-Tb4?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
Quick Setup Steps 
1) Subscribe → Get your license key from the Portal 
2) Add your domain inside the License tab 
3) Copy your License Key 
4) Paste License Key inside Plugin Settings in WP Admin 
5) Click Validate License 
6) Click Save Settings 
7) Go to Plugin Main Page → Click Rescan
Pro Version (Upgrade) 
Upgrading to Pro unlocks the full CompatShield Portal Dashboard with advanced features — vulnerability summary, detailed scan results, notifications, historic analysis, plugin issues overview, premium ZIP upload scanning, and multi-layer compatibility intelligence.
Subscribe / Upgrade to Pro: https://www.compatshield.com/
<h3>✨ Key Features</h3>
<ul>
<li>
PHP Compatibility Check – Scan plugins for PHP compatibility.
<ul>
<li>$1/month license: Shows PHP compatibility results directly inside WP Plugin backend (up to PHP 8.4)</li>
<li>Pro license: Deeper breakdowns, insights, and analysis inside Portal Dashboard</li>
</ul>
</li>
<li>
Plugin Rescan – Quickly rescan whenever you install or update plugins.
</li>
<li>
Email Notifications (Pro) – Get notified when scans complete or risks are detected.
</li>
<li>
Portal Integration (Pro) – View full detailed results in the CompatShield Portal Dashboard.
</li>
<li>
Vulnerability Summary (Pro) – Basic vulnerability insights available in the Portal.
</li>
<li>
“No Data” Plugins Handling – Easily identify custom/premium plugins or removed versions not available on WordPress.org.
</li>
</ul>
<h3>🔑 Entry Plan vs Pro Plan</h3>
<ul>
<li>
PHP Compatibility Check 
$1 Plan: WP Admin Results up to PHP 8.4 
Pro Plan: Detailed compatibility insights in Portal Dashboard
</li>
<li>
Vulnerability Summary 
$1 Plan: Not available 
Pro Plan: Available in Portal
</li>
<li>
Email Notifications 
$1 Plan: Not available 
Pro Plan: Available
</li>
<li>
Portal Dashboard 
$1 Plan: Not available 
Pro Plan: Full access (compatibility + vulnerabilities + detailed summaries + site overview)
</li>
<li>
Custom/Premium Plugins ZIP Scanning 
$1 Plan: Not available 
Pro Plan: Supported via Portal ZIP uploader
</li>
</ul>

Plugin Compatibility Checker

very helpful to check our plugin compatibility


The plugin checks in free version up to php 8.0+ compatibility. Who needs to know if a plugin is compatible with an obsolete version of php ?


A joke ?


The free version gave me a basic idea, but the paid version was way more useful. It caught PHP issues that I wouldn’t have noticed before updating. Glad I upgraded because it saved me time fixing errors later. Definitely more helpful when running sites on newer PHP versions.


Actually prevented a break on upgrade

Scan and check your plugins for PHP and WordPress compatibility. Requires a $1/month Portal subscription to obtain a license key.

Bang Vulnerability Scanner vs Plugin Compatibility Checker