WPScan – WordPress Security Scanner

wpscan · By ethicalhack3r
8k+ installs 3.8 (28) Updated 1 week ago v1.17 WP 6.9–7.1.3 PHP 7.2+

Impact score

Footprint Score across the two most representative contexts.

1 scans · last scan 2 hours ago

Compare with another plugin

Homepage Score

Impact measured on the public homepage

···
—

v1.17 · 1 scan · Consolidated score over 90 days · 1 versions

Not enough data to publish the grade (15 scans min, currently 1).

What it adds to every page load

Added time
0 ms
Added memory
0.0 MB
SQL queries
+3
CSS/JS files
+0
External calls
0

Admin Score

Impact measured in the WordPress admin

Scan being analyzed. The score will be published once we have enough measurements.

About

Please note: This plugin is no longer actively supported for non-enterprise customers. We recommend using Jetpack Protect – a free security plugin for WordPress that leverages the extensive database of WPScan. Jetpack Protect scans your site and warns you about vulnerabilities, keeping your site one step ahead of security threats and malware.

The WPScan WordPress security plugin is unique in that it uses its own manually curated WPScan WordPress Vulnerability Database. The vulnerability database has been around since 2014 and is updated on a daily basis by dedicated WordPress security specialists and the community at large. The database includes tens of thousands of known security vulnerabilities. The plugin uses this database to scan for WordPress vulnerabilities, plugin vulnerabilities and theme vulnerabilities, and has the options to schedule automated daily scans and to send email notifications.

WPScan has a Free API plan that should be suitable for most WordPress websites, however, also has paid plans for users who may need more API calls. To use the WPScan WordPress Security Plugin you will need to use a free API token by registering here.

Read more

The Free plan allows 25 API requests per day. View the different available API plans.

The WPScan WordPress Security Plugin will also check for other security issues, which do not require an API token, such as:

Description published by ethicalhack3r on WordPress.org, licensed under GPLv3.

Tags
scanner security vulnerability wpscan wpvulndb

Screenshots

Screenshots published by ethicalhack3r on WordPress.org, licensed under GPLv3.

List of vulnerabilities and icon at Admin Bar.
List of vulnerabilities and icon at Admin Bar.
Notification settings.
Notification settings.
Site health page.
Site health page.

Per-version history

Show per-version detail (1 version)

How the plugin evolves version by version.

Version Homepage Admin Last scan
v1.17 1 scan — 2 hours ago

Alternatives in the same category

Other security plugins measured by the community, ranked from lightest to heaviest.

Scan history

Show individual scan log (1 scans)

Date Version Context Score Grade Time Memory
2 hours ago v1.17 Homepage 100/100 A 0 ms 0.0 MB