Marcus Downing

<p>This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.</p>
<p>This information is only visible to administrators (or more precisely, those with the <code>manage_options</code> capability). Subscribers, authors and editors cannot see the data.</p>
<h3>Source</h3>
<p>The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/. It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.</p>
<h3>Note</h3>
<p>Using this plugin does not guarantee that your site has no vulnerabilities. It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security. This plugin is only a tool; using it responsibly is up to you.</p>
<h3>WP-CLI</h3>
<p>This plugin registers a WP-CLI command, that allows you to scan from the command line. The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).</p>
<ul>
<li><code>wp vuln scan</code>, to report all known vulnerabilities.</li>
<li><code>wp vuln plugins</code>, to report only vulnerabilities in plugins.</li>
<li><code>wp vuln themes</code>, to report only vulnerabilities in themes.</li>
<li><code>wp vuln wp</code>, to report only vulnerabilities in WordPress core.</li>
<li><code>wp vuln details</code>, to show a more detailed output on known vulnerabilities.</li>
<li><code>wp vuln clear</code>, to clear the internal cache of vulnerability data. This will result in making extra requests to the API, and is probably not needed.</li>
</ul>


Bang Vulnerability Scanner

Reports if your WordPress site has any known vulnerabilities.

Vigil

<p>Vigil Security Scanner is a proactive way to secure your WordPress site. This AI-powered security plugin scans your website for known vulnerabilities and outdated components in plugins, themes, WordPress core, and PHP versions, providing intelligent insights and actionable recommendations.</p>
<p>The plugin supports both <strong>single-site and WordPress multisite installations</strong>, helping site owners and administrators maintain security across one or multiple sites from a single dashboard.</p>
<p>Instead of waiting for attacks to happen, Vigil helps you identify security gaps and outdated software early—before they become exploitable.</p>
<p>Key Features:</p>
<ul>
<li>Zero performance impact – scans are processed on our servers using WordPress cron</li>
<li>AI-powered risk assessment with smart prioritization</li>
<li>Detection of vulnerabilities and outdated components across plugins, themes, core, and PHP</li>
<li>On-demand and scheduled daily scans</li>
<li>Detailed reporting with scan history</li>
<li>Visual dashboard for quick threat assessment</li>
<li>WordPress multisite compatibility</li>
<li>Optional premium license for automated scanning, email alerts, and advanced reporting</li>
</ul>
<p>Trusted by developers, agencies, and site owners who need proactive WordPress security with AI-powered insights.</p>
<p>Stay one step ahead of security threats with Vigil Security Scanner.</p>
<h3>External Service</h3>
<p>This plugin connects to the Vigil API hosted at wpvigil.com and related subdomains to perform security scans and generate reports. This connection is required to identify vulnerabilities and outdated components installed on the site.</p>
<p>During scans, the plugin sends information about installed components, versions, configurations, and user-defined settings. Email addresses stored in the plugin settings may also be transmitted to enable notifications, alerts, and reporting based on user preferences.</p>
<p>The API is operated by M/s Nandan Global, the developer of Vigil Security Scanner.<br />
Terms of Service: https://www.wpvigil.com/terms-of-service<br />
Privacy Policy: https://www.wpvigil.com/privacy-policy</p>
<p>For support or feedback, please visit:<br />
https://www.wpvigil.com/</p>


Vigil Security Scanner

AI-powered WordPress plugin that scans for vulnerabilities and outdated components in plugins, core, and PHP. Stay secure with proactive alerts.

Bang Vulnerability Scanner vs Vigil Security Scanner