ldebrouwer

An up-to-date WordPress installation is as safe as it can be, plugins however can often pose a security risk because they’re not maintained by hundreds of contributors. A plugin is as secure as the security knowledge of the developer allows it to be. In some cases this creates loopholes for exploits. WP Plugin Security Check checks plugins for bad practices and possible security holes limiting the risk of a compromised WordPress installation to a ‘hate to say I told you so’.

WP Plugin Security Check

WP Plugin Security Check checks if your WordPress plugins are 'safe'.

wycks

Will add a little “x” next to any files/folders set to 777, since this is inherently insecure. Checks all recursive folders that come with a default WordPress install.
This plugin can be CPU intensive as it iterates over your whole folder/file structure to gather statistics.
Notes :
<ul>
<li>Checks root, wp-admin, wp-content, wp-includes and all sub folders</li>
<li>Includes your plugin and theme folders</li>
<li>Ignores images, text, CSS , and translation files</li>
<li>Will exclude the cache folders since they contain to many files to scan.</li>
<li>Requires PHP 5.1.2 or greater</li>
<li>Please run this during low traffic.</li>
</ul>
This plugin will not return accurate results under IIS or WAMP stack due to how windows handles file permissions.

File Permissions & Size Check

Simple plugin that checks your WordPress install and shows your file permissions, size, and last modified date.

WP Plugin Security Check vs File Permissions & Size Check