OOPSpam Team

OOPVulns is a modern, accessible WordPress plugin that continuously monitors your site for known security vulnerabilities in WordPress core, plugins, and themes.
<h4>Features</h4>
<ul>
<li>Comprehensive Scanning – Scans WordPress core, all plugins, and all themes for known vulnerabilities</li>
<li>Explicit Opt-In – Vulnerability scanning is disabled by default and only runs after admin consent</li>
<li>Automatic Scans – Configurable daily or weekly automatic scanning</li>
<li>Email Notifications – Get notified when vulnerabilities are detected</li>
<li>Modern Dashboard – Clean, accessible admin interface with detailed vulnerability information</li>
<li>Severity Indicators – Color-coded severity levels (Critical, High, Medium, Low)</li>
<li>Update Guidance – See which vulnerabilities have fixes available</li>
</ul>
<h4>How It Works</h4>
The plugin checks your installed WordPress core version, plugin versions, and theme versions against the OOPSpam vulnerability database. When a known vulnerability is found, you’ll see it in the dashboard and optionally receive an email notification.
<h4>External Service</h4>
This plugin connects to the OOPSpam API to retrieve vulnerability information. When a scan runs, the following data is sent:
<ul>
<li>WordPress core version</li>
<li>Plugin slugs and versions</li>
<li>Theme slugs and versions</li>
</ul>
No personal data, user information, or site content is transmitted. 
Vulnerability API checks are disabled by default and only run after an administrator explicitly enables scanning in plugin settings.
<ul>
<li><a href="https://www.oopspam.com/terms" rel="nofollow ugc">OOPSpam Terms of Service</a></li>
<li><a href="https://www.oopspam.com/privacypolicy" rel="nofollow ugc">OOPSpam Privacy Policy</a></li>
</ul>

OOPVulns – Vulnerability Scanner

Monitor your WordPress site for security vulnerabilities in core, plugins, and themes.

Julio Potier

The <a href="http://en.wikipedia.org/wiki/Cross-site_request_forgery" rel="nofollow ugc">CSRF</a> vulnerability is the most famous web vulnerability, since … i do not remember, too long !
Many WordPress plugin (about 70%) from this repository or elsewhere, even Premim plugins are vunerable to this flaw.
To avoid get hacked because os this, just install this plugin, no settings, no tech. Just use your blog as usual.
! ONLY FOR BACK-END USAGE !

Anti CSRF

The CSRF vulnerability is the most famous web vulnerability, since ... i do not remember, too long !

OOPVulns – Vulnerability Scanner vs Anti CSRF