VulnDex

<p><strong>Stay ahead of vulnerabilities.</strong><br />
VulnDex Beacon keeps your WordPress security intelligence fresh by securely syncing technical details with your VulnDex account — giving you full visibility into outdated or vulnerable components.</p>
<p>VulnDex is a European-made platform for <strong>Vulnerability Intelligence & Management</strong>, designed to help organizations track, prioritize, and mitigate security issues before they escalate.</p>
<p>✨ <strong>Key Features</strong><br />
– 🔄 Automatic sync of WordPress core, plugins, and themes<br />
– 🕒 Scheduled reports every two hours<br />
– 🔐 Secure communication via HTTPS<br />
– 💡 Instant insight into vulnerable components<br />
– 🧩 Lightweight, transparent, and maintenance-free</p>
<p>No heavy scanners. No bloat. Just smart automation.</p>
<h3>Privacy</h3>
<p>Your privacy matters.<br />
This plugin transmits <strong>only non-personal, technical information</strong> required for vulnerability tracking:</p>
<ul>
<li>WordPress core version</li>
<li>Installed plugins (name, version, active status)</li>
<li>Installed themes (name, version, active status)</li>
<li>PHP version</li>
<li>Site URL and home URL</li>
<li>OS information (name, version)</li>
</ul>
<p><strong>Important:</strong> Users must explicitly enter an API key in the settings to enable data transmission. No data is sent without this configuration.</p>
<p>No user data, posts, or content are ever sent.<br />
All communication occurs securely via HTTPS.</p>
<p>For details, see the <a href="https://vulndex.at/privacy" rel="nofollow ugc">VulnDex Privacy Policy</a>.</p>
<h3>License</h3>
<p>This plugin is open-source software, released under the <strong>GPLv2 or later</strong> license.<br />
You’re free to modify, redistribute, or extend it — as long as the same license terms are respected.</p>
<p>🧠 Developed by <a href="https://vulndex.at" rel="nofollow ugc">VulnDex</a> – Vulnerability Management. Streamlined for Teams.<br />
Made in Austria 🇦🇹</p>


VulnDex Beacon

🛰️ Automatically sync your WordPress versions, plugins, and themes with VulnDex for continuous vulnerability insights.

Amrit Anandh

Kuppuraj

revmakx

<h3>Instant protection against disclosed vulnerabilities</h3>
<p><a href="https://defendwp.org/" rel="nofollow ugc">DefendWP.org</a> is a WordPress plugin that protects your website from hackers exploiting vulnerable code on your website. Security research companies discover vulnerabilities and notify plugin developers to patch them. After some time, they disclose the vulnerability to the public, allowing you to update your plugins. However, this system has flaws. Once vulnerabilities are publicly disclosed, hackers rush to exploit the sites in which you haven’t yet applied the patch.</p>
<h4>A Better Approach: Immediate Protection for All Users</h4>
<p>To solve this, our plugin pushes firewall rules and patches as soon as vulnerabilities are disclosed, ensuring websites are protected without waiting for an official patch. This protection is silent and automatic, ensuring that you are not affected even if you don’t take any immediate action.</p>
<ol>
<li>Immediate Patches Upon Disclosure: When vulnerabilities are disclosed, our plugin pushes patches or firewall rules that prevent exploitation.</li>
<li>Silent Protection: We operate in the background, allowing plugin developers to roll out patches at their own pace without compromising user security.</li>
<li>Free and Accessible: Security should not be a privilege. Our plugin is free and accessible and ensures that all WordPress users are protected from newly disclosed vulnerabilities.</li>
</ol>
<h3>Protecting Everyone, Not Just the Privileged Few</h3>
<p>Security should not be reserved for those who can afford premium services. The spirit of WordPress is inclusivity, and this should extend to security as well. When vulnerabilities are disclosed, they pose a risk to every website, regardless of its owner’s resources. Every WordPress user should have access to immediate protection.</p>
<p>Security researchers play a vital role in identifying vulnerabilities, but the current system leaves too many users exposed. Our approach aims to create a safer WordPress ecosystem for all, by closing the gap between vulnerability disclosure and patching.</p>
<p>This isn’t about taking credit—it’s about prioritizing the safety of small business owners, bloggers, and entrepreneurs who rely on WordPress. By silently closing the vulnerability gap, we aim for a future where WordPress security is accessible to everyone.</p>
<p>Let’s build a safer WordPress ecosystem together—one that protects all users, not just the privileged few.</p>
<h4>For plugin authors: Report a Vulnerability</h4>
<p>Do you have an active vulnerability in your plugin you want to safeguard users from? Report it <a href="https://defendwp.org/submit-a-vulnerability/" rel="nofollow ugc">here</a></p>
<h4>Support</h4>
<p>Need help with your website’s security? Just send us an email at <a href="mailto:help@defendwp.org" rel="nofollow ugc">help@defendwp.org</a>.</p>
<h4>Note</h4>
<p>This plugin utilizes the <a href="https://api.ipify.org?format=json" rel="nofollow ugc">Ipify.org</a> to provide enhanced functionality. The API allows the plugin to retrieve the exact IP of the current user, which will be used to determine whether the user can access the WordPress site.<a href="https://ipify.org" rel="nofollow ugc">Privacy policy</a></p>
<p>Vulnerabilities, IPs, Plugins and Themes data will be sent between <a href="https://defendwp.org" rel="nofollow ugc">DefendWP.org</a> and the WP site to instantly patch from vulnerabilities.</p>


DefendWP Firewall

Get instant protection against vulnerabilities disclosed by security companies.

VulnDex Beacon vs DefendWP Firewall