VulnDex

Stay ahead of vulnerabilities. 
VulnDex Beacon keeps your WordPress security intelligence fresh by securely syncing technical details with your VulnDex account — giving you full visibility into outdated or vulnerable components.
VulnDex is a European-made platform for Vulnerability Intelligence & Management, designed to help organizations track, prioritize, and mitigate security issues before they escalate.
✨ Key Features 
– 🔄 Automatic sync of WordPress core, plugins, and themes 
– 🕒 Scheduled reports every two hours 
– 🔐 Secure communication via HTTPS 
– 💡 Instant insight into vulnerable components 
– 🧩 Lightweight, transparent, and maintenance-free
No heavy scanners. No bloat. Just smart automation.
<h3>Privacy</h3>
Your privacy matters. 
This plugin transmits only non-personal, technical information required for vulnerability tracking:
<ul>
<li>WordPress core version</li>
<li>Installed plugins (name, version, active status)</li>
<li>Installed themes (name, version, active status)</li>
<li>PHP version</li>
<li>Site URL and home URL</li>
<li>OS information (name, version)</li>
</ul>
Important: Users must explicitly enter an API key in the settings to enable data transmission. No data is sent without this configuration.
No user data, posts, or content are ever sent. 
All communication occurs securely via HTTPS.
For details, see the <a href="https://vulndex.com/privacy" rel="nofollow ugc">VulnDex Privacy Policy</a>.
<h3>License</h3>
This plugin is open-source software, released under the GPLv2 or later license. 
You’re free to modify, redistribute, or extend it — as long as the same license terms are respected.
🧠 Developed by <a href="https://vulndex.com" rel="nofollow ugc">VulnDex</a> – Vulnerability Management. Streamlined for Teams. 
Made in Austria 🇦🇹

VulnDex Beacon

🛰️ Automatically sync your WordPress versions, plugins, and themes with VulnDex for continuous vulnerability insights.

Peter Butler

The recent Timthumb.php vulnerability (discussed <a href="http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/" rel="nofollow ugc">here</a>) has left scores of unsuspecting bloggers hacked. It’s the perfect combination of not so easy to fix for the technically disinclined, and easy to find and exploit for the malicious – resulting in a disastrous number of compromised sites.
The Timthumb Vulnerability Scanner plugin will scan your entire wp-content directory for instances of any outdated and insecure version of the timthumb script, and give you the option to automatically upgrade them with a single click. Doing so will protect you from hackers looking to exploit this particular vulnerability.
After new, lesser vulnerabilities were found, it became apparent that the plugin needs to be dynamic – able to keep you up to date with the latest version of timthumb, without requiring a plugin upgrade. The plugin now checks for the latest available version of timthumb routinely (each time you visit the scanner page, but no more than once a day), and can download and install the latest version, rather than the one included with the plugin. Scans are run daily (unless you disable them via the options link on the scanner page) via wp-cron to keep up with any new plugins or themes you’ve installed.
More info at <a href="http://codegarage.com/blog/2011/09/wordpress-timthumb-vulnerability-scanner-plugin/" rel="nofollow ugc">CodeGarage</a>.
Special thanks to <a href="http://jacobwg.com/" rel="nofollow ugc">Jacob Gillespie</a> for help with the bulk upgrade feature.

Timthumb Vulnerability Scanner

Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.

VulnDex Beacon vs Timthumb Vulnerability Scanner