Specialized scanning for the world's most popular CMS. Detect vulnerable plugins, themes, and core misconfigurations instantly.
We use a database of over 50,000 known WordPress vulnerabilities to check your specific installation.
We identify the exact version of WordPress core, plugins, and themes by analyzing source code, readme files, and hash values.
Detected versions are cross-referenced against our real-time database of known exploits (CVEs) and security advisories.
We attempt to list valid usernames to help you identify weak accounts and prevent brute-force attacks.
Scans for outdated or abandoned plugins that are often the entry point for attackers.
Detects if your site exposes author usernames via REST API or author archives.
Verifies if sensitive files like wp-config.php.bak or debug.log are publicly accessible.