Plugin Security Scanner

This plugin determines whether any of your plugins or themes have security vulnerabilities. It does this by looking up details in the WPScan Vulnerability Database.

It runs a scan once a day and e-mails the administrator if any vulnerable plugins or themes are found.

You can also register a webhook for notifications. The webhook will trigger daily, even if no vulnerabilities are found. The webhook is a post request with JSON payload containing the vulnerabilities.

You can enable the webhook under Settings > General tab – see the Plugin Security Scanner settings.

It adds a new menu option to the admin tools menu called “Plugin Security Scanner.” Clicking this runs a scan. If the scan finds any problems, it shows you a list of plugins or themes that have vulnerabilities, along with a description of the issue.

The WPScan Vulnerability Database API, which this plugin uses, is free for non-commercial use. However, any commercial usage will require you to purchase a commercial license from WPScan. If you are using the API for your own site, you will not need a commercial license. However, if you are a hosting company and install the plugin systematically across all your clients' sites, you will need to purchase a commercial license. If you are making heavy use of the API, it is likely that you will need to purchase a commercial license. To inquire about a commercial license, please contact team@wpvulndb.com.

Icons made by Alessio Atzeni from www.flaticon.com is licensed by CC BY 3.0

Additional Information

• Tested with 5.2.24
• WordPress Embed
• HTML Embed

Copy and paste this URL into your WordPress site to embed:

Copy and paste this code into your site to embed.