Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

WPScan · Version history

WPScan changelog and version history

Latest version
1.17
Sep 29, 2026 (1 month ago)
Releases
34
since 2019
In the last year
2
about one every 260 days
Tested up to
WordPress 7.1.4
PHP 7.2 or later

Releases each year

  • 20195 releases
  • 202014 releases
  • 202111 releases
  • 20232 releases
  • 20262 releases

20262 releases

  1. WPScan 1.17Latest

    • Requires WordPress 6.9 and PHP 7.2
    • Fix PHP 8 deprecation notices and fatal errors
    • Update bundled Action Scheduler to 4.2.0
    • Update links to the WPScan blog
    • Update “Tested up to”

  2. WPScan 1.16

    • Allow report to be POST-ed to webhook URL or downloaded as JSON.

20232 releases

  1. WPScan 1.15.7

    • Fix the way the plugin handles extension versions to be more accurate.

  2. WPScan 1.15.6

    • Added a notice pointing regular users to Jetpack Protect

202111 releases

  1. WPScan 1.15.5

    • Update “Tested up to”
    • Some minor text changes
    • Fix API conflict

  2. WPScan 1.15.4

    • Fix images not loading on some hosted websites
    • Update remediation links

  3. WPScan 1.15.3

    • Fix fatal error in security checks

  4. WPScan 1.15.2

    • Improve HTML and PDF report output
    • Disable security checks setting
    • Some refactoring

  5. WPScan 1.15.1

    • Improved email alert text
    • Improved PDF report download layout

  6. WPScan 1.15

    • Fix memory_limit when using list_files()
    • Use Action Scheduler
    • Add security check remediation links

  7. WPScan 1.14.4

    • Use new free API defaults
    • Remove “Not found in database” message

  8. WPScan 1.14.3

    • Don’t use HTTP_HOST in db exports check

  9. WPScan 1.14.2

    • Revert DISABLE_WP_CRON check
    • Fix HTTPS check

  10. WPScan 1.14.1

    • Use the wp_check_password() function to check for weak passwords

  11. WPScan 1.14

    • Uses the status endpoint to get account data
    • Fixes the account status not being updated unless a scan is performed when the API token is updated/set
    • Adds vulnerability found hook
    • New security check: Check for weak user passwords
    • New security check: HTTPS
    • Clear plan info if API Token set to null
    • Fixes automated scanning when plugin deactivated and reactivated
    • Fixes cron job not being created when using the WPSCAN_API_TOKEN constant
    • Change default scanning time to the current time
    • Many other small improvements

202014 releases

  1. WPScan 1.13.2

    • Fix XML-RPC check false positive

  2. WPScan 1.13.1

    • Fix potential WP_Error issue in XML-RPC check
    • Add version to client side CSS and JS
    • Work towards PHP WordPress coding standards

  3. WPScan 1.13

    • Improve the XML-RPC security check
    • No longer run a scan when adding an API token
    • Other small improvements & bug fixes

  4. WPScan 1.12.3

    • Improve WPScan API error handling
    • Add status URL on WPScan API errors
    • Delete doing_cron transient on plugin activation
    • Replace the xmlrpc_encode_request() PHP function
    • Blur API token setting input box

  5. WPScan 1.12.2

    • Fix bug: case statement should ‘break’

  6. WPScan 1.12.1

    • Fix bug: Handle 404 API errors

  7. WPScan 1.12

    • Code Refactoring
    • Adds Security Check System
    • Check for debug.log files
    • Check for wp-config.php backups
    • Check if XMLRPC is enabled
    • Check if default keys are used in wp-config.php
    • Check for code repo files .svn and .git
    • Create a Vulnerabilities to Ignore meta-box
    • Fixes Theme closed incorrect message and position in report
    • Show message if API is not working
    • Timeout cron jobs
    • Fix 404 error in devtools

  8. WPScan 1.11

    • Change references of wpvulndb to wpscan.com

  9. WPScan 1.10

    • Add WPSCAN_DISABLE_SCANNING_INTERVAL constant to disable automated scanning
    • Add an option in the settings to ignore items
    • Add an option in the settings to set the scan time
    • Show a not found in database message
    • Other minor bug fixes

  10. WPScan 1.9

    • Add scanning interval option to settings page
    • Some other small improvements

  11. WPScan 1.8

  12. WPScan 1.7

  13. WPScan 1.6

  14. WPScan 1.5

20195 releases

  1. WPScan 1.4

  2. WPScan 1.3

  3. WPScan 1.2

  4. WPScan 1.1

  5. WPScan 1.0

Questions about WPScan’s releases

What is the latest version of WPScan?

1.17, released on Sep 29, 2026 (1 month ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.2 or later.

How often is WPScan updated?

2 releases in the last year, about one every 260 days. Its first release on WordPress.org dates from March 2019.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in WPScan’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.