/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Exploit Scanner

Exploit Scanner

By Donncha O Caoimh (a11n)

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Exploit Scanner Review - In-Depth Analysis

Exploit Scanner checks your WordPress files and database for signs of hacking.

Performance Overview

WPS Score

6.85/10

User Rating

3.2/5 (based on 40+ reviews)

Active Installations

8,000+

Update Frequency

Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin searches the files on your website, and the posts and comments tables of your database for anything suspicious. It also examines your list of active plugins for unusual filenames.

It does not remove anything. That is left to the user to do.

It is likely that this scanner will find false positives. However, it is best to err on the side of caution; if you are unsure then ask in the Support Forums, download a fresh copy of a plugin, search the Internet for similar situations, et cetera. You should be most concerned if the scanner is making matches around unknown external links; finding base64 encoded text in modified core files or the wp-config.php file; listing extra admin accounts; or finding content in posts which you did not put there.

Follow the guides from the Codex to ensure your site is secure. A regular backup routine is extremely useful; if you ever find that your site has been hacked you can easily restore your site from a clean backup and fresh set of files.

Comparing to Alternatives

Exploit Scanner is a WordPress security plugin with several alternatives offering similar or enhanced features.

Top alternatives

Strengths

Provides detailed file scanning for potential exploits.
Can be effective when used with current WordPress hashes.
Lightweight and straightforward to use.
Free to use without requiring a paid upgrade.

Weaknesses

Plugin appears abandoned with no recent updates.
Known security vulnerabilities with no fixes available.
Error-prone and often fails to run properly.
Lacks clear documentation and support.

User Sentiment Analysis

User reviews are mixed with a significant portion expressing dissatisfaction, reflected in a 3.2 average rating and 42.5% low ratings.

Positive highlights

"Works really well with current hashes" – enacta2
"Great plugin, but not well documented" – Eduard Doloc
"Lightweight and straightforward to use" – inferred from positive reviews

Common complaints

Plugin frequently produces errors and fails to run.
No updates or support responses, suggesting abandonment.
Lists many files without meaningful analysis or guidance.
High false positives with many matches on clean installs.

Weaknesses

Outdated and unmaintained, raising security concerns.
Lacks user-friendly output and actionable information.
No active support or development community.

Who Should Use This?

Best for

Users who want a simple, free tool for scanning WordPress files and are comfortable generating or finding current WordPress hashes themselves.

Not ideal for

Users seeking a fully supported, regularly updated security plugin with comprehensive malware detection and clear actionable results.

Pricing & Value

Free version includes

The free version offers file scanning capabilities to detect potential exploits without any cost.

Final Verdict

Exploit Scanner provides a basic file scanning tool for WordPress security but suffers from lack of updates, support, and known vulnerabilities. While some users find it useful with current hashes, many report errors and ineffective results, limiting its reliability.

Given the availability of more robust and actively maintained alternatives, users seeking dependable security scanning should consider other plugins. Exploit Scanner may only suit those needing a lightweight, free option and willing to manage its limitations.

Other Notable Features

Here are a few other notable features of this free Exploit Scanner plugin.

hack

hacking

scanner

security

spam

FAQ

Download and unzip the plugin.
Copy the exploit-scanner directory into your plugins folder.
Visit your Plugins page and activate the plugin.
A new menu item called “Exploit Scanner” will be available under the Tools menu.