Security Audits

Run passive WordPress exposure and vulnerability checks without intrusive testing.

WordPress Vulnerability Scanner Lite

Check public signals and guide users to update risky core/plugins/themes.

Let users paste plugin slugs and versions to check known vulnerability advisories.

Check theme slug/version against known issue references.

Check login exposure, weak username patterns, 2FA checklist, lockout policy, and CAPTCHA risk.

Check whether xmlrpc.php is reachable and explain safe next steps.

Check public REST endpoints and explain whether exposure is normal or risky.

Test common public enumeration signals safely.

Guide users through safe file/folder permission targets by hosting type.

Create a site-specific admin hardening checklist.

Generate a client-ready security audit template from selected findings.