Vulnerability checks for plugins, themes and extensions
Most hacked sites had a plugin with a vulnerability that was already known and already fixed. Updating it in time would have been enough.
The fix exists, but it isn't installed on the site.
Every week brings dozens of vulnerabilities in WordPress plugins and Joomla extensions. With many sites to look after, matching them by hand with what's installed is impossible.
And urgency varies: a serious flaw in an active plugin needs fixing today, a minor one in a switched-off plugin can wait.
The site's inventory matched against known vulnerabilities.
Inventory
The agent reports the installed core, plugins, themes and extensions, with their versions.
Matching
We match it against Wordfence Intelligence for WordPress and the Joomla Security Centre for the Joomla core.
Priorities
Each vulnerability has a severity, a CVE and the version that fixes it. Less urgent ones can be set aside, and stay in a separate list.
Want to try it on a real site? The 30-day trial needs no credit card.
Start free trialFrequently asked questions
Where does your vulnerability data come from?
Wordfence Intelligence for WordPress core, plugins and themes, and the Joomla Security Centre for the Joomla core.
How often do you run the check?
At every site sync, and whenever the vulnerability database is updated.
Can I hide a low-severity vulnerability?
Yes. It leaves the counts and alerts, stays in a separate list, and you can bring it back whenever you like.
Goes well with
- Automatic WordPress plugin updates that roll back when something breaksA restore point including the database, page checks and automatic rollback.
- Joomla 3 has reached end of life: how to protect the sites still running itMonitoring, integrity and backups on Joomla 3.9 and 3.10, even with PHP 7.1.
- Instant alerts when a new administrator appearsNew admins, role changes and logins from unknown IPs, as they happen.
- WordPress core file integrity checksEvery file compared with the official checksums, with the changed lines.
Try it on your clients' sites.
Connect your first sites today and see what SitePing finds on them.
- Every Complete feature except backups
- Up to 10 sites
- No credit card needed to start
- At the end you choose a plan or move to Free, and nothing is charged
Already have an account? Log in. Prefer to look at one site first? Free read-only audit.