Free WordPress tools
Check any WordPress site from the outside, the way visitors and search engines see it. Nothing to install on the site, nothing to sign up for.
Each check takes 5 to 15 seconds and gives you a page you can share.
-
WordPress security review
Signs of a hack (hidden spam, redirects only some visitors get), known vulnerabilities in the installed plugin and theme versions, and what the site exposes to anyone.
- Spam that only Google is shown
- Plugins and themes with known CVEs
- A public debug log or user list
-
Cookie scanner
Opens a site in a real browser as a visitor from the EU and lists every cookie and tracking service that starts before the visitor answers the cookie banner.
- Analytics and ad cookies set before consent
- A banner that is installed but never shows
- Google Fonts and embeds that send IP addresses
-
WordPress vulnerability database
Every CVE for WordPress core, plugins and themes since 2024 (29,007 records), filterable by type and severity, updated daily.
- Core, plugin and theme CVEs since 2024
- Severity, type and the version that fixes it
- New records every morning