trgomez

Pura Vida Vulnerability Scanner checks everything installed on your site, including plugins, themes and WordPress core, against the Wordfence Intelligence vulnerability database, audits your site’s security posture, and shows you exactly what is at risk and how to fix it.
It does not invent findings. It correlates your installed software and configuration against authoritative public sources (Wordfence Intelligence, CVE/MITRE, the WordPress.org update channel) and live checks of your own server.
Security overview
The dashboard opens with an at-a-glance status table covering:
<ul>
<li>WordPress Version: OK / Warning</li>
<li>Vulnerable Plugins: OK / Critical / High / Medium</li>
<li>Missing Headers: Present / Missing / N/A (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy)</li>
<li>SSL: Valid / Expiring soon / Expired / N/A (certificate expiry)</li>
<li>DNS: OK / Issues / N/A</li>
<li>Email Security: SPF and DMARC (DKIM is selector-specific)</li>
<li>CDN/WAF: Detected / Not detected / N/A</li>
</ul>
What it does
<ul>
<li>Inventories every installed plugin, theme and the WordPress core version.</li>
<li>Matches each item and version against a continuously updated vulnerability feed.</li>
<li>Shows severity (CVSS), the CVE identifier, a description and the recommended fix for every finding.</li>
<li>Audits your configuration and lists prioritized hardening recommendations (2FA, updates, HTTPS, file editor, and more).</li>
<li>Optional scheduled scans with email alerts when new critical/high issues appear.</li>
</ul>
Data sources
<ul>
<li>Wordfence Intelligence Vulnerability Data Feed: free for personal and commercial use; includes CVE (MITRE) and CVSS information.</li>
<li>CVE (MITRE Corporation): the canonical vulnerability identifiers.</li>
<li>WordPress.org update channel: available core, plugin and theme updates.</li>
<li>Live site checks performed by the plugin: HTTP headers, SSL, DNS, SPF/DMARC and CDN/WAF.</li>
</ul>
This product includes data that may be copyrighted by Defiant Inc. (Wordfence Intelligence) and by the MITRE Corporation (CVE®); their notices are displayed alongside the relevant findings.
Developed by Pura Vida Design Studio, Open Source Security & Website Tools (https://puravidadesignstudio.com/).
<h3>External services</h3>
This plugin connects to one external service to function: the Wordfence Intelligence Vulnerability Data Feed.
Wordfence Intelligence Vulnerability Data Feed (Defiant Inc.) 
This plugin downloads the public WordPress vulnerability database from Wordfence in order to match it against the plugins, themes and core version installed on your site.
<ul>
<li>What is sent: your Wordfence Intelligence API key (in the request Authorization header) and your site’s URL (in the request User-Agent header), sent to https://www.wordfence.com/. The list of plugins and themes installed on your site is NOT transmitted; matching is performed locally on your own server.</li>
<li>When it is sent: when you run a manual scan, and when a scheduled scan runs (about once per day). The downloaded database is cached locally for 24 hours so the service is contacted at most about once per day.</li>
<li>Service terms: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/</li>
<li>Privacy policy: https://www.wordfence.com/privacy-policy/</li>
</ul>
The plugin also performs read-only checks against your own site for the Security Overview: a loopback HTTP request to your own home URL (to inspect response headers and detect a CDN/WAF) and DNS lookups for your own domain (to check DNS resolution and SPF/DMARC records). These query your own domain and public DNS only; no data is sent to any third party.

Pura Vida Vulnerability Scanner

Scan your plugins, themes and WordPress core against trusted vulnerability databases and get a clear, prioritized security overview.

WP Doctorワードプレスドクター

Try it out on your free dummy site: Click here => <a href="https://tastewp.org/plugins/wpinfecscanlite/" rel="nofollow ugc">https://tastewp.org/plugins/wpinfecscanlite/</a>
<ul>
<li>This plugin is a simple malware inspection plugin developed by a leading company in Japan that is engaged in malware removal and security-related business for WordPress sites.</li>
<li>This plugin scans WordPress malware from malware detection patterns extracted from nearly one million malware files.(State-of-the-art AI technology is used to extract malware detection patterns)</li>
<li>The plugin contains approximately 1000 of the most commonly detected malware detection patterns over the last 10 years and can comprehensively inspect program and image files contained in WordPress.</li>
<li>Detected malware can be viewed and removed from the WordPress admin screen.</li>
<li>Malware scans can be set to run automatically, with email notifications when malware is detected.</li>
<li>False positives can be whitelisted to prevent detection again.</li>
<li>Vulnerability checker will check if there are valunability in your site’s plugin and wordpress. This function checks most used valunability for hacking that has over CVSS 9.0 point. Detects approximately 500 vulnerabilities created by the NIST vulnerability database.</li>
<li>This plugin is free and does not require any registration to use the above features! Simply install and press the Malware Scanning button for easy and powerful detection of malware!</li>
<li>Detect vulnerability attacks, brute force attacks, WPSCAN executions, and other hacks against WordPress sites and block their IPs.</li>
</ul>

WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite

This plug-in can exhaustively scan program files on the site to detect malware and vulnerability. Also record hacking attempts against your site and b …

Pura Vida Vulnerability Scanner vs WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite