WordPress Security

Scan WordPress Plugins for Security Vulnerabilities

Automatically inventory your installed plugins, cross-reference them against CVE databases, and receive instant alerts before attackers exploit known vulnerabilities.

Start Scanning — $16/mo

Cancel anytime. No WordPress admin password required.

🔍
CVE Cross-Reference
Matched against NVD and WPScan databases
⚡
Real-Time Alerts
Email and dashboard notifications instantly
🔄
Continuous Monitoring
Background jobs watch your sites 24/7

Simple, Transparent Pricing

Pro Plan
$16
per month
  • ✓ Unlimited WordPress sites
  • ✓ CVE & WPScan database checks
  • ✓ Email + dashboard alerts
  • ✓ REST API & file upload scanning
  • ✓ Background continuous monitoring
  • ✓ Priority support
Get Started Now

Frequently Asked Questions

How does the scanner detect vulnerabilities?
It connects to your WordPress site via the WP REST API or a plugin file upload, inventories all installed plugins, and cross-references them against the NVD CVE database and WPScan vulnerability database in real time.
Will I be alerted automatically when a new CVE is published?
Yes. A background job continuously monitors registered sites and the vulnerability database. You receive email and dashboard alerts the moment a new vulnerability matching your plugins is found.
Is my WordPress login or admin password required?
No. The scanner only needs read-only REST API access or a generated application password with minimal permissions. Your credentials are never stored.