WooCommerceElementorYoast SEOContact Form 7AkismetJetpackWPFormsWordfenceWP RocketLiteSpeed CacheRank MathAll in One SEOAdvanced Custom FieldsWP Super CacheUpdraftPlusReally Simple SSLSlider RevolutionWP Mail SMTPDuplicatorClassic EditorW3 Total CachebbPress
WPSec
Paste your WordPress plugins, themes or core version and instantly see known security vulnerabilities (CVEs).
What is WPSec?
WPSec checks your WordPress plugins, themes and core version against a database of 40,000+ known security vulnerabilities (CVEs) from Wordfence Intelligence, and shows exactly which are at risk and which version fixes them.
How to use it
In your WordPress admin, open Plugins, select all the text and copy it — or run wp plugin list. You can also add your active theme and the WordPress core version (e.g. “WordPress 6.4.2”).
Paste it into the box above. Messy text is fine — WPSec pulls out the plugin names and versions.
Click “Scan for vulnerabilities”. Every plugin and version is matched against the vulnerability database.
Review the results: red is a known vulnerability (with its CVE and the version to update to), green is safe.
🔒 Your list is only used for the scan and is never stored.