WPScan – WordPress Security Scanner

The WPScan WordPress Security Plugin is a robust tool designed to bolster the security of your WordPress site by leveraging the extensive WPScan WordPress Vulnerability Database. This unique database, which has been meticulously curated since 2014 and includes over 21,000 known vulnerabilities, allows the plugin to perform thorough scans for vulnerabilities in WordPress cores, plugins, and themes. In addition to automated daily scans and email notifications, WPScan provides security checks that do not require an API token, such as inspecting debug logs, backup files, and configuration settings. While the plugin offers a free API plan suitable for basic needs, with 25 API requests per day, it also provides scalable paid plans for larger requirements. Despite moving its focus to enterprise customers, WPScan remains a critical tool for securing WordPress sites, though users are encouraged to consider Jetpack Protect as a recommended alternative for ongoing support.