Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Plugin Security Scanner
This plugin alerts you if any of your plugins have security vulnerabilities. It does this by utilising the WPScan Vulnerability Database once a day.
The facts
- Rating
- 4.9★ from 7
- Active installs
- 700+
- Price
- Free
- Last updated
- 19 Aug 2019
- Added
- Apr 2015
- Tested up to
- WP 5.2.26
- Downloads
- 70,652
Our analysis
AI-assistedPlugin Security Scanner is a WordPress plugin that checks for security vulnerabilities in your plugins and themes by referencing the WPScan Vulnerability Database. It performs daily scans and notifies the administrator via email if any issues are detected.
To use this plugin, you must register for an API token from the WPScan Vulnerability Database, which is required for scanning. It also supports webhook notifications, allowing you to receive updates even when no vulnerabilities are found.
Best for: This plugin is suitable for WordPress site administrators concerned about security vulnerabilities in their themes and plugins.
What it does well
- ✓Checks for vulnerabilities in plugins and themes
- ✓Daily scan with email notifications
- ✓Webhook support for notifications
- ✓Uses the WPScan Vulnerability Database
Where it falls short
- •Requires API token for functionality
- •Commercial use may require a license
- •Last updated in August 2019
Verdict
Plugin Security Scanner offers a straightforward way to monitor for vulnerabilities, but its reliance on an external API and lack of recent updates may be a concern for some users.
From the developer
Glen Scott's own description of Plugin Security Scanner, lightly tidied.
This plugin determines whether any of your plugins or themes have security vulnerabilities. It does this by looking up details in the WPScan Vulnerability Database.
It will run a scan once a day, and e-mail the administrator if any vulnerable plugins or themes are found.
Please note: As from version 2.0.0, you will need to register on the WPScan Vulnerability Database site in order to get an API token. This token is required before any security scans can be performed. Once you have your token, it can be added to the Plugin Security Scanner settings page.
You can also register a webhook for notifications. The webhook will trigger daily, even if no vulnerabilities found. The webhook is a post request, with JSON payload containing the vulnerabilities.
You can enable the webhook under Settings\General tab – see the Plugin Security Scanner settings.
It also adds a new menu option to the admin tools menu called “Plugin Security Scanner”. Clicking this runs a scan. If the scan finds any problems, it shows you a list of plugins or themes that have vulnerabilities, along with a description of the issue.
The WPScan Vulnerability Database API, which this plugin uses, is free for non-commercial use. However, any commercial usage will require that you purchase a commercial license from WPScan. If you are using the API for your own site then you will not need a commercial license. However, if you are a hosting company and install the plugin systematically across all of your clients sites, then you will need to purchase a commercial license. If you are making heavy use of the API, it is likely that you will need to purchase a commercial license. To enquire about a commercial license, please contact team@wpvulndb.com
Icons made by Alessio Atzeni from www.flaticon.com is licensed by CC BY 3.0
Tagged as
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)