ldebrouwer

An up-to-date WordPress installation is as safe as it can be, plugins however can often pose a security risk because they’re not maintained by hundreds of contributors. A plugin is as secure as the security knowledge of the developer allows it to be. In some cases this creates loopholes for exploits. WP Plugin Security Check checks plugins for bad practices and possible security holes limiting the risk of a compromised WordPress installation to a ‘hate to say I told you so’.

WP Plugin Security Check

WP Plugin Security Check checks if your WordPress plugins are 'safe'.

Gregory

The Plugin Inspector plugin is an easy way to check plugins installed on your WordPress and make sure that plugins do not use deprecated WordPress functions and some unsafe functions like eval, base64_decode, system, exec, etc. Some of those functions may be used to load malicious code (malware) from the external source directly to the site or WordPress database.
Features
<ul>
<li>Scans plugins for deprecated WordPress functions</li>
<li>Scans plugins for unsafe functions like eval, base64_decode, system, exec, etc.</li>
<li>Checks plugins to find vulnerabilities listed in WPScan Vulnerability Database</li>
<li>Beautiful source code viewer with highlighting</li>
</ul>
Plugin Inspector allows you to view all the deprecated functions complete with path, line number, deprecation function name, and the new recommended function to use. The checks are run through a simple admin page and all results are displayed at once. This is very handy for plugin developers or anybody who want to know more about installed plugins.
All code that uses the deprecated functions should be converted to use its replacement if one exists. Because deprecated functions are no longer supported may be removed from future versions of WordPress.
To check the theme files, please, use Theme Check plugin.
Another reliable plugins from trusted author
<ul>
<li><a href="https://wordpress.org/plugins/wp-cerber/" rel="ugc">Protect sites with Cerber Security plugin</a></li>
</ul>
Protects site against brute force attacks. Restrict login by IP access lists. Limit login attempts. Comprehensive control of user activity.
<ul>
<li><a href="https://wordpress.org/plugins/goo-translate-widget/" rel="ugc">Translate sites with Google Translate Widget</a></li>
</ul>
Make your website instantly available in 90+ languages with Google Translate Widget. Add the power of Google automatic translations with one click.

Plugin Inspector

Every plugin developer should be using this.
Thankyou Gioni.



Beautiful

Very useful for plugin developers to run a quick check of their code throughout development.



Great plugin

Works as advertised. Very scary to see so many plugins have so many security issues. As long as WordPress allows unsafe themes and plugins to get activated, it will never be safe, no matter how much they secure the core.



Very Cool !

Thank you very much for developing this plugin and keeping it up-to date.
Thankful to your efforts and time.



Nice Plugin

Checks plugins for deprecated WordPress functions, known security vulnerabilities and some unsafe PHP functions

WP Plugin Security Check vs Plugin Inspector