Glen Scott

This plugin determines whether any of your plugins or themes have security vulnerabilities. It does this by looking up details in the WPScan Vulnerability Database.
It will run a scan once a day, and e-mail the administrator if any vulnerable plugins or themes are found.
Please note: As from version 2.0.0, you will need to <a href="https://wpvulndb.com/users/sign_up" rel="nofollow ugc">register on the WPScan Vulnerability Database</a> site in order to get an API token. This token is required before any security scans can be performed. Once you have your token, it can be added to the Plugin Security Scanner settings page.
You can also register a webhook for notifications. The webhook will trigger daily, even if no vulnerabilities found. The webhook is a post request, with JSON payload containing the vulnerabilities.
You can enable the webhook under Settings\General tab – see the Plugin Security Scanner settings.
It also adds a new menu option to the admin tools menu called “Plugin Security Scanner”. Clicking this runs a scan. If the scan finds any problems, it shows you a list of plugins or themes that have vulnerabilities, along with a description of the issue.
The WPScan Vulnerability Database API, which this plugin uses, is free for non-commercial use. However, any commercial usage will require that you purchase a commercial license from WPScan. If you are using the API for your own site then you will not need a commercial license. However, if you are a hosting company and install the plugin systematically across all of your clients sites, then you will need to purchase a commercial license. If you are making heavy use of the API, it is likely that you will need to purchase a commercial license. To enquire about a commercial license, please contact team@wpvulndb.com
Icons made by <a href="http://www.flaticon.com/authors/alessio-atzeni" title="Alessio Atzeni" rel="nofollow ugc">Alessio Atzeni</a> from <a href="http://www.flaticon.com" title="Flaticon" rel="nofollow ugc">www.flaticon.com</a> is licensed by <a href="http://creativecommons.org/licenses/by/3.0/" title="Creative Commons BY 3.0" rel="nofollow ugc">CC BY 3.0</a>

Plugin Security Scanner

Slow to check because the API service works only one plugin at a time, but good enough. Could show the vulnerabilities found direct on Plugins page.



Could also check WP version

This plugin alerts you if any of your plugins have security vulnerabilities.  It does this by utilising the WPScan Vulnerability Database once a day.

fullworks

This plugin is your website’s security sentinel, keeping an eye on potential threats without making it sound too techy. It checks your WordPress core, themes, and plugins to find any weak spots. If it spots something amiss, you’ll get a friendly email alert to let you know there’s something worth looking at.
This clever tool relies on a powerful database to get its info, helping it keep an eye out for common WordPress vulnerabilities.
But it’s not just about vulnerabilities. The plugin also keeps an eye on abandoned plugins and themes, which can be a backdoor for trouble. With this plugin, you can easily keep your website secure and reduce the risk of security breaches.
The report page gives you the power to decide what to do next. If it finds something, you can choose to ignore it, especially if you have an old theme you love but it’s no longer getting updates. You can also give a thumbs-up to plugins or themes you know are safe.
Plus, the report gives you a quick peek at what’s changed with plugins that have updates available. This helps you decide if those updates are worth it.
If you’re more of a command-line person, you can run a security audit with the command wp fullworks-scanner. It won’t send you an email, but it’ll tell you what it found right there in your console.
In a nutshell, this handy WordPress security tool does the heavy lifting, making sure your site stays safe and sound. It’s like having a watchful eye on your website without all the jargo
<h4>Key Features</h4>
✓ Comprehensive Scan: Checks your WordPress Core version, installed themes, and plugins for vulnerabilities. 
✓ Vulnerability Database: References the WordPress Vulnerability Database API for up-to-date threat information. 
✓ Abandoned Plugin/Theme Detection: Identifies and alerts you about abandoned plugins or themes that can pose security risks. 
✓ Customizable Scanning Schedule: Adjust the scan frequency to match your needs. 
✓ User-Friendly Report: Provides detailed scan reports with the option to accept or ignore warnings and errors. 
✓ Change Log Highlights: Offers a quick review of plugin updates with extract from the change log. 
✓ WP CLI Integration: Run scans from the command line with the wp fullworks-scanner command.
<h4>Easy to Use</h4>
Don’t miss out on the opportunity to fortify your WordPress website effortlessly and stay one step ahead of potential threats. 
Try it now and experience the peace of mind that comes with superior website security. 🔒 🔒 🔒

Fullworks Security Scanner


I love how easy Fullworks Security Scanner delivers notices of potential issues by email so I don't have to log into my website to check on things. A great tool for proactive security in WordPress. 


Proactive Security Audits - Awesome

Fullworks Security Scanner: Your Website's Guardian. Core, Themes, Plugins - Checked. Vulnerabilities - Squashed. Your Site - Secure.

Plugin Security Scanner vs Fullworks Security Scanner