It’s like having your own team of WordPress security experts
Be the first to know about vulnerabilities affecting your WordPress installation, plugins, and themes.
![](http://web.archive.org./web/20240529072233im_/https://wpscan.com/wp-content/uploads/2023/09/i2_-wpscan-ui.png)
Check your WordPress site for vulnerabilities
Scan your site and get a free, instant report of your site safety.
Trusted by the world’s largest brands
![](http://web.archive.org./web/20240529072233im_/https://wpscan.com/wp-content/uploads/2024/02/spacer-sm.png)
![](http://web.archive.org./web/20240529072233im_/https://wpscan.com/wp-content/uploads/2023/10/26d641d08c1e8546a1815ac7ca28248f-modified.png)
![](http://web.archive.org./web/20240529072233im_/https://wpscan.com/wp-content/uploads/2023/10/accenture-logo-modified.png)
![](http://web.archive.org./web/20240529072233im_/https://wpscan.com/wp-content/uploads/2023/08/f8d7f-mercedes.png)
![](http://web.archive.org./web/20240529072233im_/https://wpscan.com/wp-content/uploads/2023/08/d1fff-unc.png)
![](http://web.archive.org./web/20240529072233im_/https://wpscan.com/wp-content/uploads/2023/09/wpengine_black.png)
Cataloging 50,985 WordPress core, plugin, and theme vulnerabilities
The WPScan database is continuously updated by leading WordPress security professionals.
Security solutions for everyone
Enterprise
WordPress protection with custom solutions for large enterprises.
- Custom pricing by number of sites
- Instant email alerts
- Vulnerabilities details by ID
- Latest API endpoints
- Webhooks: Slack & HTTP
- Description & PoC API data
- CVSS Risk Scores
Researcher
Security researchers are welcome to use the CLI scanner and API for non‑commercial purposes.
- CLI tools for researchers
- Capped at 25 API calls per day
Need a small business plan?
Jetpack Protect is a free plugin that uses WPScan data to alert you about threats to your website. Upgrade for WAF and one‑click fixes.
CASE STUDY
How WP Engine automates security for over 1.5 million customer sites with WPScan
WP Engine is seen by many as the leading WordPress hosting platform, empowering thousands to create and share their unique digital stories with the world. With a focus on speed, security, and support, WP Engine serves over 1.5 million WordPress websites.
The importance of keeping its customers’ websites safe from vulnerabilities and threats is a huge priority for WP Engine.
![](http://web.archive.org./web/20240529072233im_/https://wpscan.com/wp-content/uploads/2023/09/wpe-logo-h-default403x.png?w=594)
“Our customers love it. It really helps them stay out of a bad security state. And we couldn’t do it without WPScan.”
Brent Stackhouse
VP Security, WP Engine