Online WordPress Security Scanner to test vulnerabilities and health of a WordPress installation. Checks include application security, WordPress plugins, hosting environment, and web server.
This WordPress security testing page offers three scan options. The first is a free passive check that downloads a handful of pages and analyzes the site’s raw HTML. The second is a lightweight survey scan that reviews the homepage and provides a high-level overview of the WordPress installation, making it well suited to bulk testing across many sites and quickly comparing results. The final option, available to registered users, is a thorough active scan that uses more aggressive testing to identify plugins, themes, and other security-related configuration by probing common web paths.
WordPress Analysis and Security Scan
Perform a Free WordPress Security Scan with a low impact test.
Check any WordPress based site and get a high level overview of the sites security posture. Once you see how easy it is grab a membership and test Joomla with the dedicated Active Checks, Nikto, OpenVAS and more.
The basic security check will review a WordPress installation for common security-related misconfigurations. Testing with the basic check option uses regular web requests. The system downloads a handful of pages from the target site, then performs analysis on the resulting HTML source.
The more aggressive enumeration option attempts to find all plugins/themes used on the WordPress installation and attempt to enumerate users of the site. These tests will generate HTTP 404 errors in the web server logs of the target site. Be warned If you test all plugins, this will generate more than 18000 log entries and potentially trigger intrusion prevention measures.
In identifying all the plugins, themes, and users of the site, you start to understand the attack surface. With this information, you can target further testing against the discovered resources.
Analysis of compromised WordPress installations shows that exploitation most often occurs due to simple configuration errors or through plugins and themes that have not had security fixes applied.
The checks performed by our WordPress security scan will point out any obvious security failures in the WordPress installation. As well as providing recommended security-related configuration improvements to enhance the security of the website against future attacks.
