trgomez

<p>Pura Vida Vulnerability Scanner checks everything installed on your site, including plugins, themes and WordPress core, against the <strong>Wordfence Intelligence</strong> vulnerability database, audits your site’s security posture, and shows you exactly what is at risk and how to fix it.</p>
<p>It does not invent findings. It correlates your installed software and configuration against authoritative public sources (Wordfence Intelligence, CVE/MITRE, the WordPress.org update channel) and live checks of your own server.</p>
<p><strong>Security overview</strong></p>
<p>The dashboard opens with an at-a-glance status table covering:</p>
<ul>
<li>WordPress Version: OK / Warning</li>
<li>Vulnerable Plugins: OK / Critical / High / Medium</li>
<li>Missing Headers: Present / Missing / N/A (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy)</li>
<li>SSL: Valid / Expiring soon / Expired / N/A (certificate expiry)</li>
<li>DNS: OK / Issues / N/A</li>
<li>Email Security: SPF and DMARC (DKIM is selector-specific)</li>
<li>CDN/WAF: Detected / Not detected / N/A</li>
</ul>
<p><strong>What it does</strong></p>
<ul>
<li>Inventories every installed plugin, theme and the WordPress core version.</li>
<li>Matches each item and version against a continuously updated vulnerability feed.</li>
<li>Shows severity (CVSS), the CVE identifier, a description and the recommended fix for every finding.</li>
<li>Audits your configuration and lists prioritized hardening recommendations (2FA, updates, HTTPS, file editor, and more).</li>
<li>Optional scheduled scans with email alerts when new critical/high issues appear.</li>
</ul>
<p><strong>Data sources</strong></p>
<ul>
<li>Wordfence Intelligence Vulnerability Data Feed: free for personal and commercial use; includes CVE (MITRE) and CVSS information.</li>
<li>CVE (MITRE Corporation): the canonical vulnerability identifiers.</li>
<li>WordPress.org update channel: available core, plugin and theme updates.</li>
<li>Live site checks performed by the plugin: HTTP headers, SSL, DNS, SPF/DMARC and CDN/WAF.</li>
</ul>
<p>This product includes data that may be copyrighted by Defiant Inc. (Wordfence Intelligence) and by the MITRE Corporation (CVE®); their notices are displayed alongside the relevant findings.</p>
<p>Developed by Pura Vida Design Studio, Open Source Security & Website Tools (https://puravidadesignstudio.com/).</p>
<h3>External services</h3>
<p>This plugin connects to one external service to function: the Wordfence Intelligence Vulnerability Data Feed.</p>
<p><strong>Wordfence Intelligence Vulnerability Data Feed (Defiant Inc.)</strong><br />
This plugin downloads the public WordPress vulnerability database from Wordfence in order to match it against the plugins, themes and core version installed on your site.</p>
<ul>
<li>What is sent: your Wordfence Intelligence API key (in the request Authorization header) and your site’s URL (in the request User-Agent header), sent to https://www.wordfence.com/. The list of plugins and themes installed on your site is NOT transmitted; matching is performed locally on your own server.</li>
<li>When it is sent: when you run a manual scan, and when a scheduled scan runs (about once per day). The downloaded database is cached locally for 24 hours so the service is contacted at most about once per day.</li>
<li>Service terms: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/</li>
<li>Privacy policy: https://www.wordfence.com/privacy-policy/</li>
</ul>
<p>The plugin also performs read-only checks against your own site for the Security Overview: a loopback HTTP request to your own home URL (to inspect response headers and detect a CDN/WAF) and DNS lookups for your own domain (to check DNS resolution and SPF/DMARC records). These query your own domain and public DNS only; no data is sent to any third party.</p>


Pura Vida Vulnerability Scanner

Scan your plugins, themes and WordPress core against trusted vulnerability databases and get a clear, prioritized security overview.

pluginkollektiv

<p><em>AntiVirus</em> is an easy-to-use, safe tool to harden your WordPress site against exploits, malware and spam injections.<br />
You can configure <em>AntiVirus</em> to perform an automated daily scan of your theme files. If the plugin detects any suspicious code injections, it will send out a notification to a previously configured e-mail address.</p>
<p>In case your WordPress site has been hacked, <em>AntiVirus</em> will help you to become aware of the problem very quickly in order for you to take immediate action.</p>
<h3>Features</h3>
<ul>
<li>Scan for suspicious code in the theme files (daily scan with email notifications and manual scan) with an option to mark detected cases as false positive</li>
<li>Checksum verification for WordPress Core files</li>
<li>Optional: Google Safe Browsing for malware and phishing monitoring.</li>
</ul>
<p>A complete documentation is available on the <a href="https://antivirus.pluginkollektiv.org/documentation/" rel="nofollow ugc">AntiVirus website</a>.</p>
<h3>Support</h3>
<ul>
<li>Community support via the <a href="https://wordpress.org/support/plugin/antivirus" rel="ugc">support forums on wordpress.org</a></li>
<li>We don’t handle support via e-mail, Twitter, GitHub issues etc.</li>
</ul>
<h3>Contribute</h3>
<ul>
<li>Active development of this plugin is handled <a href="https://github.com/pluginkollektiv/antivirus" rel="nofollow ugc">on GitHub</a>.</li>
<li>Pull requests for documented bugs are highly appreciated.</li>
<li>If you think you’ve found a bug (e.g. you’re experiencing unexpected behavior), please post at the <a href="https://wordpress.org/support/plugin/antivirus" rel="ugc">support forums</a> first.</li>
<li>If you want to help us translate this plugin you can do so <a href="https://translate.wordpress.org/projects/wp-plugins/antivirus" rel="nofollow ugc">on WordPress Translate</a>.</li>
</ul>
<h3>Credits</h3>
<ul>
<li>Author: <a href="https://sergejmueller.github.io/" rel="nofollow ugc">Sergej Müller</a></li>
<li>Maintainers: <a href="https://pluginkollektiv.org" rel="nofollow ugc">pluginkollektiv</a></li>
</ul>


AntiVirus

Security plugin to protect your blog or website against exploits and spam injections.

Pura Vida Vulnerability Scanner vs AntiVirus