ldebrouwer

An up-to-date WordPress installation is as safe as it can be, plugins however can often pose a security risk because they’re not maintained by hundreds of contributors. A plugin is as secure as the security knowledge of the developer allows it to be. In some cases this creates loopholes for exploits. WP Plugin Security Check checks plugins for bad practices and possible security holes limiting the risk of a compromised WordPress installation to a ‘hate to say I told you so’.

WP Plugin Security Check

WP Plugin Security Check checks if your WordPress plugins are 'safe'.

Frank Neumann-Staude

Torsten Landsiedel

Drivingralle

Hinnerk Altenburg

Caspar Hübinger

Ralf Koller

Child Themes are used to avoid overwriting your customizations. But if you preserve a file in a child theme, then you maybe preserve a security risk. After an update from the parent theme you always should check the changes and maybe add them to your child theme. This plugin helps you keeping track of these changes in the parent theme.
For full usage of the plugin your parent theme has to define the version of the template file in the header of the PHP file with an additional @version info.
For example: <code>@version 1.0.0</code>
If this is the case you will see a warning if the version of the parent theme file is higher than your child theme file. And you can see the differences between the parent theme file and the child theme file per wp_text_diff()-function like in revisions.
Some posts about this plugin:
<ul>
<li><a href="https://krautpress.de/2016/child-theme-dilemma/" rel="nofollow ugc">KrautPress</a> (German)</li>
<li><a href="https://wptavern.com/child-theme-check-plugin-helps-wordpress-users-navigate-parent-theme-updates" rel="nofollow ugc">WP Tavern</a> (English)</li>
<li><a href="http://www.elmastudio.de/en/wordpress-plugins-child-theme-check/" rel="nofollow ugc">Elmastudio</a> (English)</li>
<li><a href="http://www.elmastudio.de/wordpress-plugin-tipp-child-theme-check/" rel="nofollow ugc">Elmastudio</a> (German)</li>
</ul>
These themes from <a href="http://www.elmastudio.de/en/" rel="nofollow ugc">Elmastudio</a> are already using the @version info in the header:
<ul>
<li>Uku</li>
<li>Uku Light</li>
<li>Weta</li>
<li>Pukeko</li>
<li>Zeitreise</li>
<li>Werkstatt</li>
<li>Neubau</li>
<li>Hawea</li>
</ul>
Please spread the word and if you are a theme developer, please add this to your themes too! Thanks 🙂

Child Theme Check

Just found it, great tool, thanks for sharing



Wow! great tool

I was bored to verify if my child themes were up to date and this plugin is a great tool to see in a glimps if you have to rework your child theme.



Great tool

This tool have been really helpful for me. Thanks a lot!



Very helpful

Thank you Thorsten et.al for this very useful plugin. I think it's a fantastic idea to check for a version header and this plugin is a good reminder of developing with a useful standard.



Does what it is supposed to

Warns you about outdated template files in your child theme and shows a diff view of the changes between parent and child theme template.

WP Plugin Security Check vs Child Theme Check