Best vulnerability plugins for WordPress

Patchstack

Up in the last 7 days:27#289

by Patchstack3 months ago

Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.

AntiVirus

Up in the last 7 days:2#1,078

by pluginkollektiv1 month ago

Security plugin to protect your blog or website against exploits and spam injections.

WPVulnerability

Up in the last 7 days:2#1,503

by ROBOTSTXT.es2 months ago

Get WordPress vulnerability alerts from the WPVulnerability Database API.

Lockdown WP Admin

Down in the last 7 days:8#1,866

by Sean Fisher9 years ago

Lockdown WP Admin conceals the administration and login screen from intruders. It can hide WordPress Admin (/wp-admin/) and and login (/wp-login.

WPScan

Down in the last 7 days:6#2,365

by ethicalhack3r1 month ago

WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.

IP Geo Block

#2,484

by tokkonopapa7 years ago

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

Security Ninja

Down in the last 7 days:1#2,518

by cleverplugins5 days ago

WordPress security plugin: free 8G firewall/WAF, 50+ tests, vulnerability/core scanning, events logging, AI reports.

Prevent XSS Vulnerability

Up in the last 7 days:2#2,792

by Sami Ahmed Siddiqui1 year ago

This WP plugin blocks XSS by encoding harmful URL characters & safely handling HTML in $_GET. Customizable settings for enhanced website security.

DefendWP Firewall

Down in the last 7 days:2#4,131

by revmakx1 year ago

Get instant protection against vulnerabilities disclosed by security companies.

Compromise Scanner for wp2shell

Down in the last 7 days:13#4,206

by eyesecurity3 months ago

Read-only forensic scanner for the WordPress core exploit chain CVE-2026-63030 / CVE-2026-60137 (wp2shell). Reports a scored verdict; changes nothing.

WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite

Up in the last 7 days:8#8,124

by WP Doctorワードプレスドクター1 year ago

This plug-in can exhaustively scan program files on the site to detect malware and vulnerability. Also record hacking attempts against your site and b …

Security Ninja For MainWP

Down in the last 7 days:95#9,376

by Lars Koudal11 days ago

See Security Ninja vulnerabilities and security test results in your MainWP dashboard.

SecuSeek

Down in the last 7 days:27#14,966

by SecuSeek11 months ago

Professional web security scanning and vulnerability assessment plugin. Comprehensive security analysis, real-time threat detection, and detailed secu …

Aipatch Security Scanner

Down in the last 7 days:48#16,213

by Esteban6 months ago

WordPress security scanner with 36 checks, malware scanning, core integrity verification, remediation, and 23 MCP abilities.

OOPVulns

Up in the last 7 days:24#16,316

by oopspam Team3 months ago

Monitor your WordPress site for security vulnerabilities in core, plugins, and themes.

SiteFort Security

Up in the last 7 days:2,697#17,453

by securewpteam4 days ago

Free WordPress security with dynamic bot detection, network threat intelligence, cloud-assisted malware scans, login security and vulnerability detect …

Vulnerability Monitor for the EU Cyber Resilience Act

Down in the last 7 days:135#20,501

by Mecanik Dev Ltd4 months ago

EU Cyber Resilience Act readiness for WordPress: build a CycloneDX SBOM, monitor vulnerabilities and export the documents auditors require.

Gauntlet Security

Down in the last 7 days:170#20,863

by Cornelius Bergen10 years ago

Performs a detailed security analysis of your WordPress installation. Provides specific instructions on how to make your site more secure.

SiteGuard Scanner

Up in the last 7 days:583#22,817

by EG Secure Solutions2 months ago

Companion plugin for the EG Secure Solutions vulnerability diagnostic service: signed site-ownership verification and plugin/theme inventory.

CRA Vuln Notify

Down in the last 7 days:140#26,355

by macroncode2 months ago

Monitors plugin/theme vulnerabilities and manages Cyber Resilience Act (CRA) notification deadlines, with a dashboard and ready-to-use drafts.

Vulnerabilities Check

#29,518

by sensorete11 years ago

Check for known vulnerability of wordpress, plugins and themes. At the end, you can request a quote for assistance.

NIS2 Compliance

#29,538

by Babini Mazzari4 months ago

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

InTouch Integrity Guard

Down in the last 7 days:70#30,241

by intouchdesigndev2 months ago

A lightweight file integrity checker, hardening toggles and opt-in known-vulnerability alerts — built to never slow your site down.

CyStack Security

#35,526

by CyStack6 years ago

CyStack Security constantly monitors your websites and servers to detect security issues and vulnerabilities.

VulnCue

#39,435

by vulncue10 days ago

Scans your WordPress security and tells you what to fix. Connect an account for alerts on new vulnerabilities.

Whook Security

Up in the last 7 days:1,613#44,073

by darteweb8 years ago

License URI: http://www.gnu.org/licenses/gpl-2.0.html Our plugin Scans other plugins vulnerabilities listed in the WPScan Database of vulnerabilitie …

DevaGroup DevaGuard

Down in the last 7 days:6,600#55,113

by DevaGroup9 days ago

Read-only security monitor. Sends a daily signed report of versions, file integrity and admin events to your DevaGuard dashboard.

Watchfox AI

#55,148

by ajeermahmood1 day ago

Vulnerability alerts by email. A plain-English plugin vulnerability scanner that says what to fix and by when. Free for one site.

RockScout AI

Up in the last 7 days:5,115#55,345

by netbiel3 months ago

See which of your plugins have known security holes, what each one means, and what to fix first.

S4E

#55,510

by S4E1 year ago

Integrate S4E API with WordPress to provide comprehensive security scanning capabilities for your website.

Pura Vida Vulnerability Scanner

Down in the last 7 days:474#56,422

by trgomez4 months ago

Scan your plugins, themes and WordPress core against trusted vulnerability databases and get a clear, prioritized security overview.

JAZ-X PHP Security Guardian

#57,297

by jazxinnovation13 days ago

Read-only PHP runtime security advisory monitoring and WordPress maintenance checks.

Kistn API Client

#57,440

by Christian Doebler2 months ago

Pushes installed plugin and theme inventory to the Kistn API for vulnerability monitoring.

CYRN Vulnerability Monitor

Up in the last 7 days:15,173#57,693

by cyrn24 days ago

Know when your WordPress core, plugins or themes have a known vulnerability, and fix it in one click. CYRN itself never changes your site.

Aardwolf Security Scanner

Up in the last 7 days:2,025#57,911

by aardwolfsec3 months ago

Free WordPress security scanner. Audit your site for vulnerabilities, weak settings and exposed files, with a clear fix for every issue found.

JAT Shell Scanner

Up in the last 7 days:8,595#58,990

by Jeremy Anderson3 days ago

Checks if your site is exposed to, or was hacked through, PHP2Shell (critical PHP bug) and wp2shell (WordPress bug). Optional fixes you can undo.

Plugonix Health Monitor

#61,387

by Aman Brar13 days ago

Scores every installed plugin's health from 0–100 based on update recency, popularity, and compatibility signals from WordPress.org.

CompatShield WP Site Auditor

#63,850

by CompatShield4 months ago

Comprehensive WordPress security auditor. Scans for vulnerabilities, misconfigurations and threats — scored report with actionable fix steps.

Nyambush

#65,128

by y1uda8 months ago

Connect your WordPress site to Nyambush ASM platform for continuous vulnerability monitoring and security assessment.

Integrity Sentinel

#66,934

by Bsidenet2 months ago

Audit WordPress integrity, known plugin vulnerabilities, login rate limits, admin activity, updates and frontend assets from one dashboard.

Uptime, SEO and Security monitors

#67,021

by Chatra6 years ago

Downtime Happens. Get Notified! Uptime, SEO, and Vulnerability monitors for your website, totally free.

BoonRisk

#69,770

by Boon Band8 months ago

Security posture report for WordPress — 30+ checks, prioritized risks, and a printable report. Get a clear picture in minutes.

VulnDex Beacon

#70,050

by VulnDex2 months ago

Keep WordPress core, plugin, and theme inventory current in VulnDex for coordinated vulnerability management.

Elevoire Security Audit

Down in the last 7 days:12,219#70,621

by Elevoire3 months ago

Read-only WordPress security auditing plugin. Scans for security issues, explains the risks, and recommends fixes.

BadgerScan

Down in the last 7 days:9,441#70,628

by cyberbadger1 month ago

See your site the way an attacker does and the way only an admin can, reconciled into one honest A to F grade.

ClarityGuard

Up in the last 7 days:824#71,134

by rfdizon13 days ago

Scans your WordPress site for security issues and explains them in plain English — with one-click fixes on Pro.

BeleShield Vulnerability Scanner

Down in the last 7 days:8,303#72,264

by beletech7619 days ago

Alerts you when an active plugin or theme has a known, unpatched vulnerability (CVE/WPVDB).

CoffeeDevs CVE Check for PHP

Down in the last 7 days:14,325#72,993

by coffeedevs11 days ago

Checks the PHP version of your server against known CVEs, the latest release of its branch and its official support dates.

BeleGuard Domain Scanner

#73,132

by beletech7619 days ago

Scans your subdomains and content links for dangling DNS records (abandoned cloud resources) an attacker could claim.

GuardLMS

#73,177

by Luuk Verhoeven2 months ago

Reports your WordPress core, plugin and theme inventory to GuardLMS daily so known CVEs affecting your site are detected automatically.