Md Jahid Shah

<p>BBH Security Insight runs a lightweight, read-only security audit on your WordPress installation and generates a professional Security Risk Report with color-coded risk levels (Critical, Warning, Safe), an overall security score (0–100), and detailed remediation recommendations.</p>
<p>This plugin is <strong>completely read-only</strong> — it never modifies files, never changes settings, and never sends data to external servers. It simply inspects your WordPress configuration and reports findings.</p>
<h4>Audit Checks Include</h4>
<ul>
<li><strong>WordPress Version Exposure</strong> — Detects if your WordPress version is exposed via readme.html or generator tags.</li>
<li><strong>Database Table Prefix</strong> — Checks if you are using the default <code>wp_</code> prefix.</li>
<li><strong>XML-RPC Status</strong> — Reports whether XML-RPC is enabled or disabled.</li>
<li><strong>DISALLOW_FILE_EDIT</strong> — Verifies if the built-in file editor is disabled.</li>
<li><strong>WP_DEBUG Status</strong> — Checks whether debug mode is active on production.</li>
<li><strong>Directory Browsing</strong> — Checks whether directory listing appears to be disabled.</li>
<li><strong>readme.html Exposure</strong> — Checks for the presence of the readme file.</li>
<li><strong>install.php Exposure</strong> — Checks if the installation script is accessible.</li>
<li><strong>wp-config.php Permissions</strong> — Verifies file permissions on this critical file.</li>
<li><strong>wp-content Permissions</strong> — Checks directory permissions on your content directory.</li>
<li><strong>User Enumeration Exposure</strong> — Checks for common user enumeration exposure patterns.</li>
<li><strong>Security Headers</strong> — Scans for CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, and X-Content-Type-Options.</li>
<li><strong>Uploads PHP Execution</strong> — Checks if PHP execution is blocked in the uploads directory.</li>
<li><strong>Admin Username</strong> — Detects if an administrator uses the default “admin” username.</li>
<li><strong>Malware Heuristics</strong> — Performs lightweight checks for suspicious code patterns in active plugin and theme PHP files.</li>
</ul>
<h4>Features</h4>
<ul>
<li>One-click “Run Security Audit” button on the admin dashboard.</li>
<li>Professional, color-coded Security Risk Report with score (0–100).</li>
<li>Human-readable explanations and remediation recommendations for every check.</li>
<li>Dismissible admin reminder notice.</li>
<li>Fully internationalized — ready for translation.</li>
<li>Secure AJAX with nonce verification and capability checks.</li>
<li>WordPress Coding Standards compliant.</li>
<li>No external dependencies — no Composer, no third-party APIs.</li>
<li>Read-only — never makes changes to your site.</li>
</ul>
<h4>Additional Resources</h4>
<p>Looking for additional WordPress security guidance? Visit <a href="https://jahidshah.com" rel="nofollow ugc">jahidshah.com</a> for documentation, security resources, and professional assistance.</p>
<h3>Support & Contact</h3>
<p>Need help or want to report an issue? Visit our support page or open a support ticket on the WordPress plugin repository.</p>
<ul>
<li>Website: https://jahidshah.com/</li>
<li>Support: https://wordpress.org/support/plugin/bbh-security-insight/</li>
</ul>
<h3>Other Plugins</h3>
<ul>
<li><a href="https://wordpress.org/plugins/bbh-custom-schema/" rel="ugc">BBH Custom Schema</a> – Add custom JSON-LD schema to your website</li>
<li><a href="https://wordpress.org/plugins/bbh-seo-toolkit/" rel="ugc">BBH SEO Toolkit</a> – Advanced SEO & Structured Data Engine</li>
<li><a href="https://wordpress.org/plugins/aj-faq-block/" rel="ugc">AJ FAQ Block</a> – Display FAQs with a beautiful block</li>
<li><a href="https://wordpress.org/plugins/aj-card-element/" rel="ugc">AJ Card Element</a> – Display content in beautiful cards</li>
<li><a href="https://wordpress.org/plugins/aj-square-testimonial-slider/" rel="ugc">AJ Square Testimonial Slider</a> – Showcase testimonials in a slider</li>
<li><a href="https://wordpress.org/plugins/aj-category-posts/" rel="ugc">AJ Category Posts</a> – Display posts by category</li>
<li><a href="https://wordpress.org/plugins/ajx-filter-for-woo/" rel="ugc">AJx Filter for WooCommerce</a> – Advanced product filtering for WooCommerce</li>
</ul>


BBH Security Insight

Lightweight, read-only WordPress security audits with risk scoring, security checks, and actionable recommendations.

wputils

<p>♦ Check your server’s overall security<br />
♦ Detect unsafe PHP settings<br />
♦ Detect unsafe PHP functions<br />
♦ Check for security modules<br />
♦ Detect unwanted write permissions<br />
♦ Detect all errors and error levels</p>
<p>Server Security Scan identifies possible vulnerabilities and loopholes in your sever by inspecting various PHP configurations and settings, checking write permissions of directories, checking for presence of security modules and by detecting the presence of any unsafe PHP functions. Thus it helps to protect your server from various possible web site hacks such as variable injection, code injection and SQL injection etc.</p>
<h4>Unsafe PHP configuration scan</h4>
<p>Server Security Scan checks for certain PHP configurations in your server to identify whether they are configured safely so as to safeguard your server from hackers. The scanner suggests possible issues of wrongly configuring these settings as well as the criticality level of misconfiguring these settings.</p>
<h4>Unsafe PHP function scan</h4>
<p>Hackers may misuse some of the PHP functions which you do not use in your applications. Often these functions might be enabled by default in most of the servers. The Server Security Scanner detects whether such functions are enabled in your server and suggests the criticality level and issues related to those functions.</p>
<h4>Directory permission scan</h4>
<p>It is unsafe to leave your web accessible directories with write permission. The Server Security Scanner detects all writable folder permissions and reports them.</p>
<h4>Security module scan</h4>
<p>There are certain PHP extensions which can be used to enhance the security of your PHP installation. The Server Security Scan detects whther such modules are installed on your server and reprts the same.</p>
<p>The Server Security Scan detects various possiblities of hacking your server and reports them. The items are reported with criticality of each of the detection. You may contact your host to get the issues rectified if you are not familiar with updating server configurations.</p>
<h4>About</h4>
<p>Server Security Scan is developed and maintained by <a href="http://wordpressutils.com/" title="wordpressutils.com" rel="nofollow ugc">wordpressutils</a>.</p>
<h3>More Information</h3>
<h4>Troubleshooting</h4>
<p>Please read the FAQ first if you are having problems.</p>
<h4>Requirements</h4>
<pre><code>WordPress 2.8+
PHP 5+
</code></pre>


Server Security Scan

Scans wordpress website server security for detecting possible vulnerabilities and hacks.

BBH Security Insight vs Server Security Scan