WPScan Online
Some firewalls blocks vulnerability scanners. For get true positive results add wpscan.online IP addresses (208.76.253.232-208.76.253.239 or CIDR 208.76.253.232/29 ) to the whitelist
[scan_method]
Visibility:
Scan method:
Max Scan duration:

Latest Updates and Insights on WordPress Security

Explore updates on recent attacks, vulnerabilities, and best practices to keep your WordPress site safe and secure.

WordPress to Require Two-Factor Authentication for Plugin Developers

WordPress will require two-factor authentication for plugin developers starting October 1, 2024. ...

WordPress To Mandate 2FA for Theme And Plugin Developers

Beginning on October 1st, 2024, WordPress will mandate two-factor authentication (2FA) for ...

WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers

WordPress.org has announced a new account security measure that will require accounts with ...

New Stealthy Malware Campaign Dubbed DarkCracks Exploits GLPI and WordPress Sites

DarkCracks isn’t your typical malware campaign—it’s a sophisticated Launcher designed for ...

Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress

Cybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed ...

Litespeed Cache Flaw Exposes Millions of WordPress Sites to Takeover Attacks

Discovered by security researcher Rafie Muhammad, the flaw allows unauthorized users to take ...

Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution

A critical security flaw has been disclosed in the WPML WordPress multilingual plugin that could ...

WordPress Plugin Flaw Exposes 1,000,000 WordPress Sites to Remote Code Attacks

A vulnerability in the WPML (WordPress Multilingual) plugin has put over a million WordPress ...