A5hleyRich

<p>Monitor your site’s load time, performance and security using <a href="https://wpscanner.io" rel="nofollow ugc">WP Scanner</a>. Gain an insight into how quickly your site loads for visitors over time and receive suggestions on how to improve performance. Ensure your site is secure by monitoring file changes, permissions, server headers and other security concerns.</p>
<h4>Metrics</h4>
<p>View important metrics about your WordPress install, including:</p>
<ul>
<li>Load time</li>
<li>WordPress version</li>
<li>PHP version</li>
<li>Plugin updates</li>
<li>Content breakdown</li>
</ul>
<h4>Performance</h4>
<p>The following performance rules are checked when scanning your site:</p>
<ul>
<li>Use PHP 7 or HHVM</li>
<li>Enable object caching</li>
<li>Minimize HTTP Requests</li>
<li>Use a Content Delivery Network</li>
<li>Avoid empty src or href</li>
<li>Add an Expires or a Cache-Control Header</li>
<li>Gzip Components</li>
<li>Put StyleSheets at the Top</li>
<li>Put Scripts at the Bottom</li>
<li>Avoid CSS Expressions</li>
<li>Make JavaScript and CSS External</li>
<li>Reduce DNS Lookups</li>
<li>Minify JavaScript and CSS</li>
<li>Avoid Redirects</li>
<li>Remove Duplicate Scripts</li>
<li>Configure ETags</li>
<li>Make AJAX Cacheable</li>
<li>Use GET for AJAX Requests</li>
<li>Reduce the Number of DOM Elements</li>
<li>No 404s</li>
<li>Reduce Cookie Size</li>
<li>Use Cookie-Free Domains for Components</li>
<li>Avoid Filters</li>
<li>Do Not Scale Images in HTML</li>
<li>Make favicon.ico Small and Cacheable</li>
</ul>
<h4>Security</h4>
<p>The following security rules are checked when scanning your site:</p>
<ul>
<li>Verify WordPress Core Files</li>
<li>Verify Directory and File Permissions</li>
<li>Serve Site Over HTTPS</li>
<li>Keep Plugins Updated</li>
<li>Keep WordPress Updated</li>
<li>Keep PHP Updated</li>
<li>Disable Debug Display</li>
<li>Disable File Editing</li>
<li>Remove Accounts with “Admin” Username</li>
<li>Change the Default Table Prefix</li>
<li>Configure Public-Key-Pins Header</li>
<li>Configure Content Security Policy Header</li>
<li>Configure X-Frame-Options Header</li>
<li>Configure X-Content-Type-Options Header</li>
<li>Configure X-Xss-Protection Header</li>
<li>Configure Strict-Transport-Security Header</li>
<li>Disable Server Header</li>
<li>Disable X-Powered-By Header</li>
</ul>


WP Scanner – Performance and Security

Awesome App

Scan your WordPress site and receive recommendations on how to improve load time, performance and security.

Peter Butler

<p>The recent Timthumb.php vulnerability (discussed <a href="http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/" rel="nofollow ugc">here</a>) has left scores of unsuspecting bloggers hacked. It’s the perfect combination of not so easy to fix for the technically disinclined, and easy to find and exploit for the malicious – resulting in a disastrous number of compromised sites.</p>
<p>The Timthumb Vulnerability Scanner plugin will scan your entire wp-content directory for instances of any outdated and insecure version of the timthumb script, and give you the option to automatically upgrade them with a single click.  Doing so will protect you from hackers looking to exploit this particular vulnerability.</p>
<p>After new, lesser vulnerabilities were found, it became apparent that the plugin needs to be dynamic – able to keep you up to date with the latest version of timthumb, without requiring a plugin upgrade.  The plugin now checks for the latest available version of timthumb routinely (each time you visit the scanner page, but no more than once a day), and can download and install the latest version, rather than the one included with the plugin.  Scans are run daily (unless you disable them via the options link on the scanner page) via wp-cron to keep up with any new plugins or themes you’ve installed.</p>
<p>More info at <a href="http://codegarage.com/blog/2011/09/wordpress-timthumb-vulnerability-scanner-plugin/" rel="nofollow ugc">CodeGarage</a>.</p>
<p>Special thanks to <a href="http://jacobwg.com/" rel="nofollow ugc">Jacob Gillespie</a> for help with the bulk upgrade feature.</p>


Timthumb Vulnerability Scanner

Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.

WP Scanner – Performance and Security vs Timthumb Vulnerability Scanner