Scan a WordPress website
Enter the full URL of the WordPress site you own. We detect its version, plugins and themes, then check them against known and recent vulnerabilities.
How to use
- Enter the full URL of your WordPress website (e.g. https://example.com) and click Scan.
- Review the detected WordPress version, plugins and themes.
- Verify ownership: request a code to an email address on the scanned site's domain, then enter the code.
- Verify your GCC mobile number via Firebase SMS (one-time code).
- Once both are verified, click View full results to see all vulnerabilities and the future-risk watchlist.
Vulnerability data covers known CVEs and misconfigurations through 05 Nov 2026. Only scan sites you own or have permission to test. All searches are logged with IP and browser details for security.