VulnDex

Stay ahead of vulnerabilities. 
VulnDex Beacon keeps your WordPress security intelligence fresh by securely syncing technical details with your VulnDex account — giving you full visibility into outdated or vulnerable components.
VulnDex is a European-made platform for Vulnerability Intelligence & Management, designed to help organizations track, prioritize, and mitigate security issues before they escalate.
✨ Key Features 
– 🔄 Automatic sync of WordPress core, plugins, and themes 
– 🕒 Scheduled reports every two hours 
– 🔐 Secure communication via HTTPS 
– 💡 Instant insight into vulnerable components 
– 🧩 Lightweight, transparent, and maintenance-free
No heavy scanners. No bloat. Just smart automation.
<h3>Privacy</h3>
Your privacy matters. 
This plugin transmits only non-personal, technical information required for vulnerability tracking:
<ul>
<li>WordPress core version</li>
<li>Installed plugins (name, version, active status)</li>
<li>Installed themes (name, version, active status)</li>
<li>PHP version</li>
<li>Site URL and home URL</li>
<li>OS information (name, version)</li>
</ul>
Important: Users must explicitly enter an API key in the settings to enable data transmission. No data is sent without this configuration.
No user data, posts, or content are ever sent. 
All communication occurs securely via HTTPS.
For details, see the <a href="https://vulndex.com/privacy" rel="nofollow ugc">VulnDex Privacy Policy</a>.
<h3>License</h3>
This plugin is open-source software, released under the GPLv2 or later license. 
You’re free to modify, redistribute, or extend it — as long as the same license terms are respected.
🧠 Developed by <a href="https://vulndex.com" rel="nofollow ugc">VulnDex</a> – Vulnerability Management. Streamlined for Teams. 
Made in Austria 🇦🇹

VulnDex Beacon

🛰️ Automatically sync your WordPress versions, plugins, and themes with VulnDex for continuous vulnerability insights.

Storm Rockwell

This plugin automatically checks installed plugins for known vulnerabilities utilizing WPScan’s API and provides optional email alerts.
Features:
<ul>
<li>Automatic vulnerability detection in plugins utilizing WPScan’s API</li>
<li>Optional email alerts</li>
<li>Utilizes WP Cron to check for new security updates twice a day</li>
<li>Cached API results to decrease backend load time significantly</li>
</ul>

Vulnerable Plugin Checker

Instantly works after activation, I didn't have to do anything else to set it up. Apparently my Visual Composer was vulnerable, wouldn't have found out otherwise.



Great stuff

I can say it has made me feel safer when hosting sites. I get alerted before a hack takes place as I have dealt with hacked sites for far too long. I haven't dealt with a hacked site running my plugin. Plugin vulnerabilities are the easiest way for a hacker to get into your site/server.

I love my plugin

Automatically checks installed plugins for known vulnerabilities and provides optional email alerts.

VulnDex Beacon vs Vulnerable Plugin Checker