Marcus Downing

<p>This plugin adds an admin page under the Tools section that reports on any known vulnerabilities in your version of WordPress and any installed themes or plugins.</p>
<p>This information is only visible to administrators (or more precisely, those with the <code>manage_options</code> capability). Subscribers, authors and editors cannot see the data.</p>
<h3>Source</h3>
<p>The information this plugin uses comes from the WPScan Vulnerability Database: https://wpvulndb.com/. It uses a cache and internal throttling to ensure its use of the API is not excessive or abusive.</p>
<h3>Note</h3>
<p>Using this plugin does not guarantee that your site has no vulnerabilities. It also does not absolve you from responsibilities as a site owner to secure your site in other ways, such as SSL or host security. This plugin is only a tool; using it responsibly is up to you.</p>
<h3>WP-CLI</h3>
<p>This plugin registers a WP-CLI command, that allows you to scan from the command line. The response codes are compatible with Nagios (1 for critical error, 2 for warning, 3 for unknown).</p>
<ul>
<li><code>wp vuln scan</code>, to report all known vulnerabilities.</li>
<li><code>wp vuln plugins</code>, to report only vulnerabilities in plugins.</li>
<li><code>wp vuln themes</code>, to report only vulnerabilities in themes.</li>
<li><code>wp vuln wp</code>, to report only vulnerabilities in WordPress core.</li>
<li><code>wp vuln details</code>, to show a more detailed output on known vulnerabilities.</li>
<li><code>wp vuln clear</code>, to clear the internal cache of vulnerability data. This will result in making extra requests to the API, and is probably not needed.</li>
</ul>


Bang Vulnerability Scanner

Reports if your WordPress site has any known vulnerabilities.

jerryscg

<p>VulnTitan is lightweight WordPress security plugin that helps you detect known vulnerabilities, malware infections, and unauthorized file changes. It uses real-time threat data from the VulnTitan API to scan your plugins, themes, and WordPress core for critical issues. With easy-to-understand results, no bloat, and modern scanning logic, VulnTitan gives you the essential tools to secure your site — without slowing it down.</p>
<h3>External services</h3>
<p>This plugin connects to an external API at https://vulntitan.com/api/vulnerabilities to fetch up-to-date vulnerability data for WordPress core, plugins, and themes. This data is essential to detect known vulnerabilities during scan operations.</p>
<p>When a scan is performed, the following data is sent to the VulnTitan API:<br />
– The slug and version of each plugin, theme, or WordPress core installation on the site.</p>
<p>This data is transmitted only during scans initiated by the user or by scheduled scan settings. No personal or user-identifying information is collected, transmitted, or stored.</p>
<p>The external service is provided by VulnTitan.com.</p>
<ul>
<li>Terms of Service: https://vulntitan.com/terms</li>
<li>Privacy Policy: https://vulntitan.com/privacy</li>
</ul>


VulnTitan – Security Scanner: Vulnerabilities, Malware & File Integrity

VulnTitan is lightweight WordPress security plugin that helps you detect known vulnerabilities, malware infections, and unauthorized file changes.

Bang Vulnerability Scanner vs VulnTitan – Security Scanner: Vulnerabilities, Malware & File Integrity