/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ WPScan – WordPress Security Scanner

WPScan – WordPress Security Scanner

By ethicalhack3r

Security & Privacy / Security Scanning & Malware Protection

WPScan – WordPress Security Scanner Review - In-Depth Analysis

WPScan is a WordPress security scanner that checks for vulnerabilities in your site. It uses a comprehensive vulnerability database to identify risks and notify users.

Performance Overview

WPS Score

6.58/10

User Rating

3.8/5 (based on 28+ reviews)

Active Installations

8,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

WPScan is a WordPress security scanner designed to identify vulnerabilities within your WordPress site. It utilizes a manually curated vulnerability database that is updated daily by security specialists.

This plugin scans for known vulnerabilities in WordPress core, plugins, and themes, providing users with essential security checks. It also offers automated daily scans and email notifications to keep you informed about any new vulnerabilities.

With a free API plan allowing 25 requests per day, WPScan is suitable for most WordPress websites. Additional security checks include verifying debug logs, backup files, and weak passwords.

Comparing to Alternatives

WPScan is a specialized WordPress security scanner focusing on vulnerability detection. Compared to other security plugins, it offers a unique database-driven approach to identifying risks.

Top alternatives

Strengths

Comprehensive vulnerability database updated regularly
Specialized focus on plugin and theme vulnerabilities
Lightweight and focused scanning without heavy resource use
Open source with community contributions

Weaknesses

Requires API subscription for full functionality
User interface can be technical and less user-friendly
Limited features beyond vulnerability scanning
Some false positive alerts reported by users

User Sentiment Analysis

User feedback highlights both the plugin's usefulness and some frustrations, especially regarding alerts and subscription requirements.

Positive highlights

"Very useful especially if you use many plugins that are not professionally supported." - Jan
Effective at detecting vulnerabilities in plugins and themes
Open source nature appreciated by security-conscious users

Common complaints

Frequent false alerts about HTTPS issues - Hans Konings
Subscription required to use API, limiting free usage - quadeg
Lack of detailed information on some detected issues - Dan
Perceived push towards Jetpack integration - tripflex

Weaknesses

Alerts can be confusing or inaccurate
Subscription model limits free access
Support and communication issues reported
Interface may be challenging for non-technical users

Who Should Use This?

Best for

WPScan is ideal for developers, security professionals, and site administrators who want a focused tool to identify vulnerabilities in WordPress plugins and themes using a detailed vulnerability database.

Not ideal for

It is less suitable for casual users or those seeking an all-in-one security solution with firewall and malware removal features, or users unwilling to subscribe for API access.

Pricing & Value

Free version includes

The free version allows basic vulnerability scanning with limited API requests, suitable for small sites or initial checks.

Pro version

The pro version offers increased API request limits, real-time vulnerability updates, and priority support, enhancing scanning depth and frequency.

Final Verdict

WPScan is a powerful and specialized tool for identifying WordPress vulnerabilities, backed by a comprehensive and regularly updated database. It excels in vulnerability detection but requires a subscription for full functionality, which may limit accessibility for some users.

While it may not replace full-featured security suites, WPScan is a valuable asset for those focused on vulnerability management and security auditing, especially professionals comfortable with its technical nature and subscription model.

Other Notable Features

Here are a few other notable features of this free WPScan – WordPress Security Scanner plugin.

WordPress security

vulnerability scanner

WPScan

Screenshots

FAQ

There is one API call made for the WordPress version, one call for each installed plugin and one for each theme. By default there is one scan per day. The number of daily scans can be configured when configuring notifications.