Marcus Downing

<p>This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.</p>
<p>This information is only visible to administrators (or more precisely, those with the <code>manage_options</code> capability). Subscribers, authors and editors cannot see the data.</p>
<h3>Source</h3>
<p>The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/. It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.</p>
<h3>Note</h3>
<p>Using this plugin does not guarantee that your site has no vulnerabilities. It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security. This plugin is only a tool; using it responsibly is up to you.</p>
<h3>WP-CLI</h3>
<p>This plugin registers a WP-CLI command, that allows you to scan from the command line. The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).</p>
<ul>
<li><code>wp vuln scan</code>, to report all known vulnerabilities.</li>
<li><code>wp vuln plugins</code>, to report only vulnerabilities in plugins.</li>
<li><code>wp vuln themes</code>, to report only vulnerabilities in themes.</li>
<li><code>wp vuln wp</code>, to report only vulnerabilities in WordPress core.</li>
<li><code>wp vuln details</code>, to show a more detailed output on known vulnerabilities.</li>
<li><code>wp vuln clear</code>, to clear the internal cache of vulnerability data. This will result in making extra requests to the API, and is probably not needed.</li>
</ul>


Bang Vulnerability Scanner

Reports if your WordPress site has any known vulnerabilities.

Vigil

<p>Vigil Security Scanner is the proactive way to secure your WordPress site. This AI-powered security plugin continuously monitors your website for known vulnerabilities and outdated components in plugins, themes, WordPress core, and PHP versions, providing you with intelligent insights and actionable recommendations.</p>
<p>Don’t wait for an attack – identify security gaps and outdated components before hackers do.</p>
<p>Key Features:</p>
<p>Zero performance impact – runs silently in background using WordPress cron<br />
 AI-powered risk assessment – smart prioritization with actionable recommendations<br />
 Comprehensive monitoring of vulnerabilities and outdated components across plugins, themes, core, and PHP<br />
 Automated daily scanning at user-defined times<br />
 Track security improvements with detailed reporting and scan history<br />
 Visual dashboard for quick threat assessments<br />
 Enterprise licensing for automated scanning, email alerts, and advanced features<br />
 We run resource intensive scan operations on our servers leaving your web server resource available to serve your website visitors.</p>
<p>Trusted by developers, agencies, and site owners who demand proactive WordPress security with AI-powered insights.</p>
<p>Stay steps ahead of hackers. Install Vigil Security Scanner and secure smarter.</p>
<h3>External Service</h3>
<p>This plugin connects to VIGIL API located at wpvigil.com and other related (sub)domain(s) to perform the security scan and generate reports. This is required to perform the task of confirming the outdated components of the site and to find out security vulnerabilities of the installed components being used on the site.</p>
<p>For each scan, it sends, installed components, versions, settings, configurations, preferences, and other data of the site. Along with this, email IDs saved in the settings are sent to allow us to determine and send notifications and/or alerts and/or reports to the respective users of the site including site health reports, critical notifications, scan results, among other services, based on their preferences and schedules.</p>
<p>This API is operated by M/s Nandan Global, the developer of Vigil Security Scanner Plugin: “<a href="https://www.wpvigil.com/terms-of-service" rel="nofollow ugc">terms of use</a>“, “<a href="https://www.wpvigil.com/privacy-policy" rel="nofollow ugc">privacy policy</a>“</p>
<p>For support or feedback, visit<br />
https://www.wpvigil.com/</p>


Vigil Security Scanner

AI-powered WordPress plugin that scans for vulnerabilities and outdated components in plugins, core, and PHP. Stay secure with proactive alerts.

Bang Vulnerability Scanner vs Vigil Security Scanner