OOPSpam Team

<p>OOPVulns is a modern, accessible WordPress plugin that continuously monitors your site for known security vulnerabilities in WordPress core, plugins, and themes.</p>
<h4>Features</h4>
<ul>
<li><strong>Comprehensive Scanning</strong> – Scans WordPress core, all plugins, and all themes for known vulnerabilities</li>
<li><strong>Explicit Opt-In</strong> – Vulnerability scanning is disabled by default and only runs after admin consent</li>
<li><strong>Automatic Scans</strong> – Configurable daily or weekly automatic scanning</li>
<li><strong>Email Notifications</strong> – Get notified when vulnerabilities are detected</li>
<li><strong>Modern Dashboard</strong> – Clean, accessible admin interface with detailed vulnerability information</li>
<li><strong>Severity Indicators</strong> – Color-coded severity levels (Critical, High, Medium, Low)</li>
<li><strong>Update Guidance</strong> – See which vulnerabilities have fixes available</li>
</ul>
<h4>How It Works</h4>
<p>The plugin checks your installed WordPress core version, plugin versions, and theme versions against the OOPSpam vulnerability database. When a known vulnerability is found, you’ll see it in the dashboard and optionally receive an email notification.</p>
<h4>External Service</h4>
<p>This plugin connects to the OOPSpam API to retrieve vulnerability information. When a scan runs, the following data is sent:</p>
<ul>
<li>WordPress core version</li>
<li>Plugin slugs and versions</li>
<li>Theme slugs and versions</li>
</ul>
<p>No personal data, user information, or site content is transmitted.<br />
Vulnerability API checks are disabled by default and only run after an administrator explicitly enables scanning in plugin settings.</p>
<ul>
<li><a href="https://www.oopspam.com/terms" rel="nofollow ugc">OOPSpam Terms of Service</a></li>
<li><a href="https://www.oopspam.com/privacypolicy" rel="nofollow ugc">OOPSpam Privacy Policy</a></li>
</ul>


OOPVulns – Vulnerability Scanner

Monitor your WordPress site for security vulnerabilities in core, plugins, and themes.

Storm Rockwell

<p>This plugin automatically checks installed plugins for known vulnerabilities utilizing WPScan’s API and provides optional email alerts.</p>
<p><strong>Features:</strong></p>
<ul>
<li>Automatic vulnerability detection in plugins utilizing WPScan’s API</li>
<li>Optional email alerts</li>
<li>Utilizes WP Cron to check for new security updates twice a day</li>
<li>Cached API results to decrease backend load time significantly</li>
</ul>


Vulnerable Plugin Checker

Instantly works after activation, I didn't have to do anything else to set it up. Apparently my Visual Composer was vulnerable, wouldn't have found out otherwise.



Great stuff

I can say it has made me feel safer when hosting sites. I get alerted before a hack takes place as I have dealt with hacked sites for far too long. I haven't dealt with a hacked site running my plugin. Plugin vulnerabilities are the easiest way for a hacker to get into your site/server.

I love my plugin

Automatically checks installed plugins for known vulnerabilities and provides optional email alerts.

OOPVulns – Vulnerability Scanner vs Vulnerable Plugin Checker