Free Tools · Security

Plugin Vulnerability Check

Check any WordPress plugin for known security flaws. Add your version number to see which ones affect you.

Enter a plugin to check

Use the plugin's wordpress.org slug (the last part of its plugin URL). Add a version to see if that exact release is affected.

✓ Known CVEs ✓ Version-aware ✓ Results in seconds

What the plugin check shows

Known flaws
Every reported vulnerability for the plugin, with its CVE number when there is one.
Severity
How serious each flaw is, so you know what to fix first.
Fixed-in version
The release that fixed each flaw. Enter your version to see which ones still apply.

Straight answers about your results.

Where does the data come from?

From the WPScan vulnerability database, which tracks security flaws reported in WordPress plugins, themes and core.

What is a plugin slug?

The slug is the plugin’s short name in its WordPress.org address. For wordpress.org/plugins/elementor, the slug is elementor.

What should I do if my version is affected?

Update to the fixed version right away. If there’s no fix yet, turn the plugin off until one is released.

Is the plugin check free?

Yes. It’s free and there’s nothing to sign up for.

Quick checks you can run any time. No signup.

Every extra plugin adds weight and risk. We review each one and remove what you don’t need.