Marcus Downing

<p>This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.</p>
<p>This information is only visible to administrators (or more precisely, those with the <code>manage_options</code> capability). Subscribers, authors and editors cannot see the data.</p>
<h3>Source</h3>
<p>The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/. It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.</p>
<h3>Note</h3>
<p>Using this plugin does not guarantee that your site has no vulnerabilities. It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security. This plugin is only a tool; using it responsibly is up to you.</p>
<h3>WP-CLI</h3>
<p>This plugin registers a WP-CLI command, that allows you to scan from the command line. The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).</p>
<ul>
<li><code>wp vuln scan</code>, to report all known vulnerabilities.</li>
<li><code>wp vuln plugins</code>, to report only vulnerabilities in plugins.</li>
<li><code>wp vuln themes</code>, to report only vulnerabilities in themes.</li>
<li><code>wp vuln wp</code>, to report only vulnerabilities in WordPress core.</li>
<li><code>wp vuln details</code>, to show a more detailed output on known vulnerabilities.</li>
<li><code>wp vuln clear</code>, to clear the internal cache of vulnerability data. This will result in making extra requests to the API, and is probably not needed.</li>
</ul>


Bang Vulnerability Scanner

Reports if your WordPress site has any known vulnerabilities.

Harpalsinh Parmar

<p><strong>Security Checker for Themes</strong> is a powerful plugin designed to help WordPress developers ensure their themes adhere to coding standards, are free from security vulnerabilities, and maintain high-quality code. This plugin analyzes your theme’s PHP code, highlights potential issues, and provides a comprehensive report with a graph and score based on the findings.</p>
<h3>Key Features</h3>
<ul>
<li><strong>Code Analysis</strong>: Thoroughly scans your theme’s PHP code for common issues and potential problems.</li>
<li><strong>Security Check</strong>: Identifies security vulnerabilities to help you keep your theme secure.</li>
<li><strong>Coding Standards</strong>: Ensures your theme adheres to WordPress coding standards.</li>
<li><strong>Graphical Report</strong>: Provides a visual representation of the analysis with a detailed graph.</li>
<li><strong>Scoring System</strong>: Assigns a score to your theme based on the issues found, giving you a clear understanding of your theme’s quality.</li>
</ul>
<h3>Benefits</h3>
<ul>
<li>Improve the quality of your theme by identifying and fixing issues.</li>
<li>Enhance the security of your theme by addressing vulnerabilities.</li>
<li>Ensure compliance with WordPress coding standards.</li>
<li>Get a clear, visual overview of your theme’s code quality.</li>
</ul>


Security Checker for Themes

Analyze your WordPress theme's PHP code for issues, security vulnerabilities, and adherence to coding standards with a detailed report and score.

Bang Vulnerability Scanner vs Security Checker for Themes